Wind River Support Network

HomeDefectsLINCD-5266

Fixed

LINCD-5266 : Security Advisory - libxml2 - CVE-2021-3516

Created: Apr 28, 2021 Updated: Sep 13, 2022

Resolved Date: Jul 16, 2021

Found In Version: 10.20.6.0

Fix Version: 10.21.29.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Userspace

Description

 libxml2: use-after-free in xmlEncodeEntitiesInternal() in entities.c

Reference:
https://gitlab.gnome.org/GNOME/libxml2/-/issues/230

Upstream patch:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/1358d157d0bd83be1dfe356a69213df9fac0b539

CREATE(Triage):(User=admin) CVE-2021-3516 (https://nvd.nist.gov/vuln/detail/CVE-2021-3516)

CVEs

CVE-2021-3516