IBM Support

IV80616: SECURITY VULNERABILITY WITH LIBXML2 APPLIES TO AIX 7200-00

A fix is available

Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • 



Local fix


    

  • 



Problem summary


    

  • 3 security vulnerability have been reported against libxml2.

CVE-2015-7941
CVE-2015-7942
CVE-2015-8241

We have libxml2-2.6.22 in AIX version equal to lower than
AIX 61X(6.1 TL8 SP 7) and AIX 71J (7.1 TL2 SP7)
And we have libxml2-2.7.8 from AIX 61Y (6.1 TL9) and from
 AIX 71L (7.1 TL3) onwards.

    



Problem conclusion


    

  • Add CVE fixes to the libxml2

    



Temporary fix


    

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IV80616
    • 

  • Reported component name
    AIX V7.2
    • 

  • Reported component ID
    5765CD200
    • 

  • Reported release
    720
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Submitted date
    2016-01-20
    • 

  • Closed date
    2016-03-08
    • 

  • Last modified date
    2016-11-09
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    AIX V7.2
    • 

  • Fixed component ID
    5765CD200
    • 



Applicable component levels


    

  • R720  PSY  U870330
       UP16/05/04  I  1000
    • 



PTF to Fileset Mapping








      
              
                            

              

              [{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSVEF8","label":"AIX 7.2 Enterprise Edition"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"720","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG11S","label":"AIX 7.2 HIPERS, APARs and Fixes"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"720","Edition":"","Line of Business":{"code":"","label":""}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            09 November 2016
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback