Wind River Support Network

HomeDefectsLIN1021-45

Fixed

LIN1021-45 : Security Advisory - libxml2 - CVE-2021-3518

Created: May 17, 2021 Updated: Aug 25, 2021

Resolved Date: Jul 17, 2021

Found In Version: 10.21.20.1

Fix Version: 10.21.20.3

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

libxml2: use-after-free in xmlXIncludeDoProcess() in xinclude.c


Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/237

Upstream patch:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/1098c30a040e72a4654968547f415be4e4c40fe7


CREATE(Triage):(User=admin) CVE-2021-3518 (https://nvd.nist.gov/vuln/detail/CVE-2021-3518)

CVEs

CVE-2021-3518