[CLSA-2022:1667512639] Fix CVE(s): CVE-2016-3709

Type:

security

Severity:

None

Release date:

2022-11-03 21:57:19 UTC

Description:

   * SECURITY UPDATE: Possible cross-site scripting vulnerability in libxml2
     - debian/patches/CVE-2016-3709.patch: Revert commit 960f0e27 that has
     some problems
     - CVE-2016-3709
   * Fix parser termination from "Double hyphen within comment" error

Updated packages:

libxml2_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4_amd64.deb
sha:86ae2f0dc9f6f1178cf06eb12135434974d9cc3d
libxml2-dev_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4_amd64.deb
sha:a1f835df5b01e69f2c26b6c8c4e203775d811982
libxml2-doc_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4_all.deb
sha:06858456b81443ec613143b34e90b97d664eafab
libxml2-utils_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4_amd64.deb
sha:4cb271dab9a7502b13c55f68e15904d9cdd0b34f
python-libxml2_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4_amd64.deb
sha:0d56e45731c4d586c449e331e90a4d3722d24cf6

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.