libxml2: The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es)...
CVE-2018-9251 is fixed in 3 products on 1 platform, first by RHSA-2020:1827, released April 28, 2020. It is not reported as exploited. Patch Radar priority: Routine.
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c (CVE-2018-14404) * libxml2: infinite loop in xz_decomp function in xzlib.c (CVE-2018-9251) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libxml2 · RHEL 8 | 0:2.9.7-7.el8 | RHSA-2020:1827 | Apr 28, 2020 |
| libxml2 · ol 8 | 0:2.9.7-7.0.1.el8 | ELSA-2020-1827 | May 5, 2020 |
| libxml2-devel · RHEL 8 | 0:2.9.7-7.el8 | RHSA-2020:1827 | Apr 28, 2020 |
| libxml2-devel · ol 8 | 0:2.9.7-7.0.1.el8 | ELSA-2020-1827 | May 5, 2020 |
| python3-libxml2 · RHEL 8 | 0:2.9.7-7.el8 | RHSA-2020:1827 | Apr 28, 2020 |
| python3-libxml2 · ol 8 | 0:2.9.7-7.0.1.el8 | ELSA-2020-1827 | May 5, 2020 |