libxml2: The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es)...
CVE-2018-14404 is fixed in 5 products on 1 platform, first by libxml2 2.9.4+dfsg1-6.1ubuntu1.2, released July 30, 2018. It is not reported as exploited. Patch Radar priority: High.
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c (CVE-2018-14404) * libxml2: infinite loop in xz_decomp function in xzlib.c (CVE-2018-9251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libxml2 · RHEL 8 | 0:2.9.7-7.el8 | RHSA-2020:1827 | Apr 28, 2020 |
| libxml2 · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.2 | libxml2 2.9.4+dfsg1-6.1ubuntu1.2 | Jul 30, 2018 |
| libxml2 · ol 8 | 0:2.9.7-7.0.1.el8 | ELSA-2020-1827 | May 5, 2020 |
| libxml2-devel · RHEL 8 | 0:2.9.7-7.el8 | RHSA-2020:1827 | Apr 28, 2020 |
| libxml2-devel · ol 8 | 0:2.9.7-7.0.1.el8 | ELSA-2020-1827 | May 5, 2020 |
| libxml2-utils · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.2 | libxml2-utils 2.9.4+dfsg1-6.1ubuntu1.2 | Jul 30, 2018 |
| python-libxml2 · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.2 | python-libxml2 2.9.4+dfsg1-6.1ubuntu1.2 | Jul 30, 2018 |
| python3-libxml2 · RHEL 8 | 0:2.9.7-7.el8 | RHSA-2020:1827 | Apr 28, 2020 |
| python3-libxml2 · Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.2 | python3-libxml2 2.9.4+dfsg1-6.1ubuntu1.2 | Jul 30, 2018 |
| python3-libxml2 · ol 8 | 0:2.9.7-7.0.1.el8 | ELSA-2020-1827 | May 5, 2020 |