huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2016-3841: kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets.
Component: kernel
Severity: Important
CWE: CWE-667 (Improper Locking)
CVSS v3: 8.4 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2016-08-08T00:00:00+00:00

It was found that the Linux kernel's IPv6 implementation mishandled socket options. A local attacker could abuse concurrent access to the socket options to escalate their privileges, or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call.

Statement: This issue affects Red Hat Enterprise Linux 6 and 7 kernels.  This issue was fixed in a version 6 prior to this issue being raised.

As this issue is rated as important, it has been scheduled to be fixed in a future version of Red Hat Enterprise Linux 7.

Affected upstream versions: n/a
Fixed upstream versions: v4.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 45f6fad84cc305103b28d73482b344d7f5b76f39
CVE-2016-4020: Qemu: i386: leakage of stack memory to guest in kvmvapic.c
Component: Qemu
Severity: Low
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 3.4 (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N)
Public date: 2016-04-07T00:00:00+00:00

An information-exposure flaw was found in Quick Emulator (QEMU) in Task Priority Register (TPR) optimizations for 32-bit Windows guests. The flaw could occur while accessing TPR. A privileged user inside a guest could use this issue to read portions of the host memory.

Statement: This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle:
https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v2.7.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 691a02e2ce0c413236a78dee6f2651c937b09fb0
CVE-2016-4070: php: Integer overflow in php_raw_url_encode
Component: php
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2016-03-11T00:00:00+00:00

Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a denial of service (application crash) via a long string to the rawurlencode function. NOTE: the vendor says "Not sure if this qualifies as security issue (probably not).


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.34
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 95433e8e339dbb6b5d5541473c1661db6ba2c451
CVE-2016-4071: php: Format string vulnerability in php_snmp_error()
Component: php
Severity: Moderate
CWE: CWE-134 (Use of Externally-Controlled Format String)
CVSS v3: 5 (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Public date: 2016-03-02T00:00:00+00:00

Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.


Affected upstream versions: n/a
Fixed upstream versions: php-7.0.5
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 6e25966544fb1d2f3d7596e060ce9c9269bbdcf8
CVE-2016-4072: php: Invalid memory write in phar on filename containing \0 inside name
Component: php
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 4.5 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Public date: 2016-03-19T00:00:00+00:00

The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.


Affected upstream versions: n/a
Fixed upstream versions: php-7.0.5
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 1e9b175204e3286d64dfd6c9f09151c31b5e099a
CVE-2016-4073: php: mb_strcut() Negative size parameter in memcpy
Component: php
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 4.5 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Public date: 2016-03-26T00:00:00+00:00

Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted mb_strcut call.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.34
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 64f42c73efc58e88671ad76b6b6bc8e2b62713e1
CVE-2016-4300: libarchive: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo
Component: libarchive
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 8.4 (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L)
Public date: 2016-06-19T00:00:00+00:00

A vulnerability was found in libarchive's handling of 7zip data.  A specially crafted 7zip file can cause a integer overflow resulting in memory corruption that can lead to code execution.


Affected upstream versions: n/a
Fixed upstream versions: v3.2.1
Upstream repository: https://github.com/libarchive/libarchive
Upstream fix commit: e79ef306afe332faf22e9b442a2c6b59cb175573
CVE-2016-4302: libarchive: Heap buffer overflow in the Rar decompression functionality
Component: libarchive
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 7.7 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L)
Public date: 2016-06-19T00:00:00+00:00

A vulnerability was found in libarchive's handling of RAR archives. A specially crafted RAR file can cause a heap overflow, potentially leading to code execution in the context of the application.


Affected upstream versions: n/a
Fixed upstream versions: v3.2.1
Upstream repository: https://github.com/libarchive/libarchive
Upstream fix commit: 05caadc7eedbef471ac9610809ba683f0c698700
CVE-2016-4444: setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin
Component: setroubleshoot-plugins
Severity: Important
CWE: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Public date: 2016-06-21T00:00:00+00:00

A shell command injection flaw was found in the way the setroubleshoot allow_execmod plugin executed external commands. A local attacker able to trigger an execmod SELinux denial could use this flaw to execute arbitrary code with root privileges.


Affected upstream versions: n/a
Fixed upstream versions: setroubleshoot-plugins-3.0.62
Upstream repository: https://github.com/fedora-selinux/setroubleshoot
Upstream fix commit: 5cd60033ea7f5bdf8c19c27b23ea2d773d9b09f5
CVE-2016-4445: setroubleshoot: insecure use of commands.getstatusoutput in sealert
Component: setroubleshoot
Severity: Moderate
CWE: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Public date: 2016-06-21T00:00:00+00:00

A shell command injection flaw was found in the way the setroubleshoot executed external commands. A local attacker able to trigger certain SELinux denials could use this flaw to execute arbitrary code with root privileges.


Affected upstream versions: n/a
Fixed upstream versions: setroubleshoot-plugins-3.0.62
Upstream repository: https://github.com/fedora-selinux/setroubleshoot
Upstream fix commit: 2d12677629ca319310f6263688bb1b7f676c01b7
CVE-2016-4446: setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin
Component: setroubleshoot-plugins
Severity: Important
CWE: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Public date: 2016-06-21T00:00:00+00:00

A shell command injection flaw was found in the way the setroubleshoot allow_execstack plugin executed external commands. A local attacker able to trigger an execstack SELinux denial could use this flaw to execute arbitrary code with root privileges.


Affected upstream versions: n/a
Fixed upstream versions: setroubleshoot-plugins-3.0.63
Upstream repository: https://github.com/fedora-selinux/setroubleshoot
Upstream fix commit: eaccf4c0d20a27d3df5ff6de8c9dcc80f6f40718
CVE-2016-4447: libxml2: Heap-based buffer underreads due to xmlParseName
Component: libxml2
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2016-05-23T00:00:00+00:00

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.4
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 00906759053986b8079985644172085f74331f83
CVE-2016-4448: libxml2: Format string vulnerability
Component: libxml2
Severity: Moderate
CWE: CWE-134 (Use of Externally-Controlled Format String)
Public date: 2016-05-23T00:00:00+00:00

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.4
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 4472c3a5a5b516aaf59b89be602fbce52756c3e9
CVE-2016-4449: libxml2: Inappropriate fetch of entities content
Component: libxml2
Severity: Moderate
Public date: 2016-05-23T00:00:00+00:00

XML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.4
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: b1d34de46a11323fccffa9fadeb33be670d602f5
CVE-2016-4470: kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path
Component: kernel
Severity: Important
CWE: CWE-253 (Incorrect Check of Function Return Value)
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2016-06-15T00:00:00+00:00

A flaw was found in the Linux kernel's keyring handling code: the key_reject_and_link() function could be forced to free an arbitrary memory block. An attacker could use this flaw to trigger a use-after-free condition on the system, potentially allowing for privilege escalation.

Statement: This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 6 and may be addressed in a future update.

This issue does not affect the Linux kernel packages as shipped with Red Hat
Enterprise Linux 7 and Red Hat Enterprise MRG 2 as the due updates to fix
this issue have been shipped now.

Affected upstream versions: n/a
Fixed upstream versions: v4.7
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 38327424b40bcebe2de92d07312c89360ac9229a
CVE-2016-4483: libxml2: out-of-bounds read
Component: libxml2
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2016-05-03T00:00:00+00:00

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627.

Statement: When a specially-crafted XML file is parsed via an application compiled against libxml2, this can cause the application to crash. (No code execution)

Affected upstream versions: n/a
Fixed upstream versions: v2.9.4
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: c97750d11bb8b6f3303e7131fe526a61ac65bcfd
CVE-2016-4537: php: bcpowmod accepts negative scale causing heap buffer overflow corrupting _one_ definition
Component: php
Severity: Low
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2016-04-24T00:00:00+00:00

The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.35
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: d650063a0457aec56364e4005a636dc6c401f9cd
CVE-2016-4538: php: bcpowmod accepts negative scale causing heap buffer overflow corrupting _one_ definition
Component: php
Severity: Low
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2016-04-24T00:00:00+00:00

The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_, _one_, or _two_ global variable, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.35
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: d650063a0457aec56364e4005a636dc6c401f9cd
CVE-2016-4539: php: xml_parse_into_struct() can crash when XML parser is re-used
Component: php
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2016-04-25T00:00:00+00:00

The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.35
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: dccda88f27a084bcbbb30198ace12b4e7ae961cc
CVE-2016-4540: php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used
Component: php
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2016-04-20T00:00:00+00:00

The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.35
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: fd9689745c44341b1bd6af4756f324be8abba2fb
CVE-2016-4541: php: OOB read in grapheme_stripos and grapheme_strpos when negative offset is used
Component: php
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2016-04-20T00:00:00+00:00

The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.35
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: fd9689745c44341b1bd6af4756f324be8abba2fb
CVE-2016-4542: php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input
Component: php
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2016-04-24T00:00:00+00:00

The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.35
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 082aecfc3a753ad03be82cf14f03ac065723ec92
CVE-2016-4543: php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input
Component: php
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2016-04-24T00:00:00+00:00

The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.35
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 082aecfc3a753ad03be82cf14f03ac065723ec92
CVE-2016-4544: php: Out-of-bounds heap memory read in exif_read_data() caused by malformed input
Component: php
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2016-04-24T00:00:00+00:00

The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.35
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 082aecfc3a753ad03be82cf14f03ac065723ec92
CVE-2016-4565: kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko
Component: kernel
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2016-05-07T00:00:00+00:00

A flaw was found in the way certain interfaces of the Linux kernel's Infiniband subsystem used write() as bi-directional ioctl() replacement, which could lead to insufficient memory security checks when being invoked using the splice() system call. A local unprivileged user on a system with either Infiniband hardware present or RDMA Userspace Connection Manager Access module explicitly loaded, could use this flaw to escalate their privileges on the system.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and Red Hat Enterprise MRG-2. Future Linux kernel updates for the respective releases might address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.6
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3
CVE-2016-4569: kernel: Information leak in Linux sound module in timer.c
Component: kernel
Severity: Low
CWE: CWE-665 (Improper Initialization)
Public date: 2016-05-08T00:00:00+00:00

A vulnerability was found in Linux kernel. There is an information leak in file "sound/core/timer.c" of the latest mainline Linux kernel, the stack object “tread” has a total size of 32 bytes. It contains a 8-bytes padding, which is not initialized but sent to user via copy_to_user(), resulting a kernel leak.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. Future Linux kernel updates for the respective releases might address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.7
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: cec8f96e49d9be372fdb0c3836dcf31ec71e457e
CVE-2016-4578: kernel: Information leak in events in timer.c
Component: kernel
Severity: Low
CWE: CWE-665 (Improper Initialization)
Public date: 2016-05-03T00:00:00+00:00

A vulnerability was found in Linux kernel. There is an information leak in file sound/core/timer.c of the latest mainline Linux kernel. The stack object “r1” has a total size of 32 bytes. Its field “event” and “val” both contain 4 bytes padding. These 8 bytes padding bytes are sent to user without being initialized.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. Future Linux kernel updates for the respective releases might address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.7
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: e4ec8cc8039a7063e24204299b462bd1383184a5
CVE-2016-4581: kernel: Slave being first propagated copy causes oops in propagate_mnt
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2016-05-05T00:00:00+00:00

fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6, as there is no user namespace support in the products listed.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. Future Linux kernel updates for the respective releases might address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.6
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 5ec0811d30378ae104f250bfc9b3640242d81e3f
CVE-2016-4658: libxml2: Use after free via namespace node in XPointer ranges
Component: libxml2
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Public date: 2016-10-12T00:00:00+00:00

A use-after-free flaw was found in the Xpointer implementation of libxml2. An attacker could use this flaw against an application parsing untrusted XML files and compiled with libxml2 to leak small amount of memory data.

Statement: This flaw can be triggered by parsing untrusted XML files via applications compiled with libxml2 causing the application to crash. For web browsers or browser like applications, which parse untrusted web content, it may be possible to trigger this flaw without any user intervention and cause remote code execution with the permissions of the user running the browser. For other applications this flaw is difficult to trigger and even difficult to exploit in real life situations.

The status of mingw-libxml2 package in RHEL-8 is marked as "not-affected" because it does not impact end-users.

Affected upstream versions: n/a
Fixed upstream versions: v2.9.5
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: c1d1f7121194036608bf555f08d3062a36fd344b
CVE-2016-4809: libarchive: Memory allocate error with symbolic links in cpio archives
Component: libarchive
Severity: Low
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 3.7 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2016-05-12T00:00:00+00:00

A vulnerability was found in libarchive. A specially crafted cpio archive containing a symbolic link to a ridiculously large target path can cause memory allocation to fail, resulting in any attempt to view or extract the archive crashing.


Affected upstream versions: n/a
Fixed upstream versions: v3.2.1
Upstream repository: https://github.com/libarchive/libarchive
Upstream fix commit: fd7e0c02