Synopsis

Moderate: libxml2 security update

Type/Severity

Security Advisory: Moderate

Topic

An update for libxml2 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

• libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c (CVE-2018-14404)
  
• libxml2: infinite loop in xz_decomp function in xzlib.c (CVE-2018-9251)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The desktop must be restarted (log out, then log back in) for this update to take effect.

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

• BZ - 1565318 - CVE-2018-9251 libxml2: infinite loop in xz_decomp function in xzlib.c
• BZ - 1595985 - CVE-2018-14404 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c

CVEs

• CVE-2018-9251
• CVE-2018-14404

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index

Red Hat Enterprise Linux for x86_64 8

SRPM
libxml2-2.9.7-7.el8.src.rpm	SHA-256: 9b927460bfb3f516dea150de4ba40ce2a1782d5123962c002c49eb7ad2ad2d9d
x86_64
libxml2-2.9.7-7.el8.i686.rpm	SHA-256: 697b0618316a3e5aeb1a504878d8687926b75e1f3f00dfb2f3eb0e608d42e52f
libxml2-2.9.7-7.el8.x86_64.rpm	SHA-256: 65bf9a4f6477ee3ad4c01f552c94560e92cd51611cecaff291650c56d5786fc6
libxml2-debuginfo-2.9.7-7.el8.i686.rpm	SHA-256: 549de032ca237831eae755960e0ab42595bdf1f1ba16bb925423576a5b172dbb
libxml2-debuginfo-2.9.7-7.el8.i686.rpm	SHA-256: 549de032ca237831eae755960e0ab42595bdf1f1ba16bb925423576a5b172dbb
libxml2-debuginfo-2.9.7-7.el8.x86_64.rpm	SHA-256: e3a3991151416d9f07e65a19e91a18863016e10ba39a0d9f61a9a6fa41b3a6fc
libxml2-debuginfo-2.9.7-7.el8.x86_64.rpm	SHA-256: e3a3991151416d9f07e65a19e91a18863016e10ba39a0d9f61a9a6fa41b3a6fc
libxml2-debugsource-2.9.7-7.el8.i686.rpm	SHA-256: 84d19d48498436dfda38c06db69fd8b0db150a3110b9722ad654a11bf13e028b
libxml2-debugsource-2.9.7-7.el8.i686.rpm	SHA-256: 84d19d48498436dfda38c06db69fd8b0db150a3110b9722ad654a11bf13e028b
libxml2-debugsource-2.9.7-7.el8.x86_64.rpm	SHA-256: c8b5a0cc1244bf98258338ec11b0a6a0cb08345f33aaf5570b8d9389dd7e2f55
libxml2-debugsource-2.9.7-7.el8.x86_64.rpm	SHA-256: c8b5a0cc1244bf98258338ec11b0a6a0cb08345f33aaf5570b8d9389dd7e2f55
libxml2-devel-2.9.7-7.el8.i686.rpm	SHA-256: 7901fc5b3b9c0685c17120859d23403e84a9da6458db90bfeac7ec2339c1d737
libxml2-devel-2.9.7-7.el8.x86_64.rpm	SHA-256: f46f4bcc85f45063dd8dfc73b9024b9f71cbeb26e4ac82f9f463a6967b3a08ae
python3-libxml2-2.9.7-7.el8.x86_64.rpm	SHA-256: e8efebd2312a5b45160eb07c9a311632557c1cb7f3652ea3e91acbc66ac63ea7
python3-libxml2-debuginfo-2.9.7-7.el8.i686.rpm	SHA-256: 36bb324cb45457c990917bd11a7406f72a9ef0e4a9d66b93bab477bbc3bd18d8
python3-libxml2-debuginfo-2.9.7-7.el8.i686.rpm	SHA-256: 36bb324cb45457c990917bd11a7406f72a9ef0e4a9d66b93bab477bbc3bd18d8
python3-libxml2-debuginfo-2.9.7-7.el8.x86_64.rpm	SHA-256: 477aa4c40e44fb323959057e7a68d4b4777d4eec3bb316232b8a70726e0a8b0f
python3-libxml2-debuginfo-2.9.7-7.el8.x86_64.rpm	SHA-256: 477aa4c40e44fb323959057e7a68d4b4777d4eec3bb316232b8a70726e0a8b0f

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
libxml2-2.9.7-7.el8.src.rpm	SHA-256: 9b927460bfb3f516dea150de4ba40ce2a1782d5123962c002c49eb7ad2ad2d9d
s390x
libxml2-2.9.7-7.el8.s390x.rpm	SHA-256: 35197371e37e599e683c8f5d91d1a5699191dfdc58cd67577caf64d60bfbe630
libxml2-debuginfo-2.9.7-7.el8.s390x.rpm	SHA-256: 333f5e60b8fe31e67ac0c35ee1af88088ed13f41bf40d6a29821c72d6b68ca3e
libxml2-debuginfo-2.9.7-7.el8.s390x.rpm	SHA-256: 333f5e60b8fe31e67ac0c35ee1af88088ed13f41bf40d6a29821c72d6b68ca3e
libxml2-debugsource-2.9.7-7.el8.s390x.rpm	SHA-256: d00f39efad3ab45a042234f8623152b79d6d02e5c354a52a246cf7e4a91a4585
libxml2-debugsource-2.9.7-7.el8.s390x.rpm	SHA-256: d00f39efad3ab45a042234f8623152b79d6d02e5c354a52a246cf7e4a91a4585
libxml2-devel-2.9.7-7.el8.s390x.rpm	SHA-256: a9eb9f5cd048a20ffc09db7bc5b685166396bf53c83958124154a530f444e900
python3-libxml2-2.9.7-7.el8.s390x.rpm	SHA-256: f8fb64d872132bbe7689bfd7ac362d9657e426887f8005fd352a3312b1485e47
python3-libxml2-debuginfo-2.9.7-7.el8.s390x.rpm	SHA-256: 0adf8d9edd9edde31821041e0c867148cb2ec221eaf72066d479a582ab70f4c1
python3-libxml2-debuginfo-2.9.7-7.el8.s390x.rpm	SHA-256: 0adf8d9edd9edde31821041e0c867148cb2ec221eaf72066d479a582ab70f4c1

Red Hat Enterprise Linux for Power, little endian 8

SRPM
libxml2-2.9.7-7.el8.src.rpm	SHA-256: 9b927460bfb3f516dea150de4ba40ce2a1782d5123962c002c49eb7ad2ad2d9d
ppc64le
libxml2-2.9.7-7.el8.ppc64le.rpm	SHA-256: 02588da4a395f531cd067e502d39f880093902bbda979d0a60732fd50dbe10e1
libxml2-debuginfo-2.9.7-7.el8.ppc64le.rpm	SHA-256: 2c64fcfdd7bb230655e146bd705a38863e31a88fc0375cdbc078e09ee3ebd52a
libxml2-debuginfo-2.9.7-7.el8.ppc64le.rpm	SHA-256: 2c64fcfdd7bb230655e146bd705a38863e31a88fc0375cdbc078e09ee3ebd52a
libxml2-debugsource-2.9.7-7.el8.ppc64le.rpm	SHA-256: 4ad5a60974d5ddfaf0af250b8df9b07a72b94b1d96f29161a3dba87a843d7bbd
libxml2-debugsource-2.9.7-7.el8.ppc64le.rpm	SHA-256: 4ad5a60974d5ddfaf0af250b8df9b07a72b94b1d96f29161a3dba87a843d7bbd
libxml2-devel-2.9.7-7.el8.ppc64le.rpm	SHA-256: 6e7e06693518635320ac43ee6128cf6a641ec4e79200c5746fdb17a6661c6b67
python3-libxml2-2.9.7-7.el8.ppc64le.rpm	SHA-256: 7c6173f1f7b296a3db8d9eb7ecb0f995d2e6edfc51e7c0ccf91be9fc212628f0
python3-libxml2-debuginfo-2.9.7-7.el8.ppc64le.rpm	SHA-256: f946ea93a1049b073022f5f19517a37b1f419e53d47cfdc655e98f2c70f51e7b
python3-libxml2-debuginfo-2.9.7-7.el8.ppc64le.rpm	SHA-256: f946ea93a1049b073022f5f19517a37b1f419e53d47cfdc655e98f2c70f51e7b

Red Hat Enterprise Linux for ARM 64 8

SRPM
libxml2-2.9.7-7.el8.src.rpm	SHA-256: 9b927460bfb3f516dea150de4ba40ce2a1782d5123962c002c49eb7ad2ad2d9d
aarch64
libxml2-2.9.7-7.el8.aarch64.rpm	SHA-256: ae7bc950e43f1985e0928c0c281647108fbc71d6133b9bed0936613536da0ef9
libxml2-debuginfo-2.9.7-7.el8.aarch64.rpm	SHA-256: e190cc44e2352dfb820938f6760072e7573bb5bf649baaf140e16ae133f74863
libxml2-debuginfo-2.9.7-7.el8.aarch64.rpm	SHA-256: e190cc44e2352dfb820938f6760072e7573bb5bf649baaf140e16ae133f74863
libxml2-debugsource-2.9.7-7.el8.aarch64.rpm	SHA-256: acb78e8aa55250e8ae3cfa7a7a8660638ebd9dfe8d05f72e33ac496ecca07260
libxml2-debugsource-2.9.7-7.el8.aarch64.rpm	SHA-256: acb78e8aa55250e8ae3cfa7a7a8660638ebd9dfe8d05f72e33ac496ecca07260
libxml2-devel-2.9.7-7.el8.aarch64.rpm	SHA-256: b9e97e9ec311214c476c28b780d99e5c5bb1d7f652dc649b2e37da6122a0515b
python3-libxml2-2.9.7-7.el8.aarch64.rpm	SHA-256: c6fd894a891fc891168e2b92c5b0d5af43ffb05152eddc6c371be9026af1da47
python3-libxml2-debuginfo-2.9.7-7.el8.aarch64.rpm	SHA-256: 925240db4fb28d4a16da23244d660efae615944a21ce3e34fbe75c344ece14a8
python3-libxml2-debuginfo-2.9.7-7.el8.aarch64.rpm	SHA-256: 925240db4fb28d4a16da23244d660efae615944a21ce3e34fbe75c344ece14a8