Univention Bugzilla – Bug 42892
libxml2: Multiple issues (4.1)
Last modified: 2016-12-01 11:57:29 CET
Upstream Debian package version 2.8.0+dfsg1-7+wheezy7 fixes this issue: * libxml2 in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document. (CVE-2016-4658)
Also: * legacy xmlXPtrRangeToFunction could be abused to trigger use-after-free error with the potential for remote code execution (CVE-2016-5131)
Advisory: libxml2.yaml
OK: DEBIAN_FRONTEND=noninteractive apt-get install --reinstall libxml2-utils OK: functional test: # wget -q --no-check-certificate https://www.univention.de -O - | xmllint --html --valid --noout - OK: advisory
<http://errata.software-univention.de/ucs/4.1/340.html>