Lucene search
RedHatRHSA-2024:0413HistoryJan 24, 2024 - 2:40 p.m.
(RHSA-2024:0413) Moderate: libxml2 security update
2024-01-2414:40:23
access.redhat.com
14
libxml2
security update
integer overflows
dict corruption
null dereference
buffer overflow
xml standards
development toolbox
cve-2022-40303
cve-2022-40304
cve-2023-28484
cve-2023-29469
cve-2023-39615
cvss score
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
-
libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303)
-
libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304)
-
libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)
-
libxml2: Hashing of empty dict strings isn’t deterministic (CVE-2023-29469)
-
libxml2: crafted xml can cause global buffer overflow (CVE-2023-39615)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | s390x | python3-libxml2-debuginfo | < 2.9.7-13.el8_6.4 | python3-libxml2-debuginfo-2.9.7-13.el8_6.4.s390x.rpm |
| RedHat | 8 | x86_64 | libxml2-debuginfo | < 2.9.7-13.el8_6.4 | libxml2-debuginfo-2.9.7-13.el8_6.4.x86_64.rpm |
| RedHat | 8 | x86_64 | libxml2-debugsource | < 2.9.7-13.el8_6.4 | libxml2-debugsource-2.9.7-13.el8_6.4.x86_64.rpm |
| RedHat | 8 | i686 | libxml2 | < 2.9.7-13.el8_6.4 | libxml2-2.9.7-13.el8_6.4.i686.rpm |
| RedHat | 8 | i686 | libxml2-devel | < 2.9.7-13.el8_6.4 | libxml2-devel-2.9.7-13.el8_6.4.i686.rpm |
| RedHat | 8 | i686 | python3-libxml2-debuginfo | < 2.9.7-13.el8_6.4 | python3-libxml2-debuginfo-2.9.7-13.el8_6.4.i686.rpm |
| RedHat | 8 | aarch64 | libxml2-debugsource | < 2.9.7-13.el8_6.4 | libxml2-debugsource-2.9.7-13.el8_6.4.aarch64.rpm |
| RedHat | 8 | x86_64 | libxml2-devel | < 2.9.7-13.el8_6.4 | libxml2-devel-2.9.7-13.el8_6.4.x86_64.rpm |
| RedHat | 8 | s390x | python3-libxml2 | < 2.9.7-13.el8_6.4 | python3-libxml2-2.9.7-13.el8_6.4.s390x.rpm |
| RedHat | 8 | ppc64le | libxml2-debuginfo | < 2.9.7-13.el8_6.4 | libxml2-debuginfo-2.9.7-13.el8_6.4.ppc64le.rpm |
Related
nessus
nessus
RHEL 8 : libxml2 (RHSA-2024:0413)
2024-01-25 00:00:00
Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current libxml2 Multiple Vulnerabilities (SSA:2023-343-01)
2023-12-09 00:00:00
SUSE SLES12 Security Update : libxml2 (SUSE-SU-2023:3665-1)
2023-09-19 00:00:00
slackware
slackware
[slackware-security] libxml2
2023-12-10 01:15:09
openvas
openvas
Slackware: Security Advisory (SSA:2023-343-01)
2023-12-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3665-1)
2023-09-19 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2504)
2023-08-01 00:00:00
osv
osv
libxml2 vulnerabilities
2023-04-19 13:42:53
libxml2 - security update
2023-04-30 00:00:00
Moderate: libxml2 security update
2023-01-23 00:00:00
github
github
Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs
2023-04-11 21:48:01
Update bundled libxml2 to v2.10.3 to resolve multiple CVEs
2022-10-18 18:12:31
oraclelinux
oraclelinux
libxml2 security update
2023-08-02 00:00:00
libxml2 security update
2023-08-10 00:00:00
libxml2 security update
2023-01-16 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2321
2024-01-09 09:53:22
Advisory ROSA-SA-2023-2319
2023-12-26 12:04:20
ibm
ibm
fedora
fedora
[SECURITY] Fedora 38 Update: libxml2-2.10.4-1.fc38
2023-04-18 01:40:06
[SECURITY] Fedora 37 Update: libxml2-2.10.4-1.fc37
2023-04-18 01:32:12
[SECURITY] Fedora 36 Update: libxml2-2.10.3-1.fc36
2022-10-25 13:13:35
redhat
redhat
(RHSA-2023:4529) Moderate: libxml2 security update
2023-08-08 07:21:37
(RHSA-2023:4349) Moderate: libxml2 security update
2023-08-01 07:58:11
(RHSA-2023:0173) Moderate: libxml2 security update
2023-01-16 09:03:23
rocky
rocky
libxml2 security update
2023-10-06 23:10:01
libxml2 security update
2023-01-16 09:03:23
libxml2 security update
2023-01-23 14:30:36
redos
redos
ROS-20230616-04
2023-06-16 00:00:00
ROS-20221110-01
2022-11-10 00:00:00
debian
debian
[SECURITY] [DLA 3172-1] libxml2 security update
2022-10-30 15:57:58
[SECURITY] [DSA 5391-1] libxml2 security update
2023-04-20 20:45:49
[SECURITY] [DLA 3405-1] libxml2 security update
2023-04-30 11:00:47
aix
aix
AIX is vulnerable to arbitrary code execution due to libxml2
2023-02-08 13:18:47
AIX is vulnerable to a denial of service due to libxml2
2023-07-25 11:08:32
freebsd
freebsd
libxml2 -- multiple vulnerabilities
2023-04-11 00:00:00
cloudfoundry
cloudfoundry
USN-6028-1: libxml2 vulnerabilities | Cloud Foundry
2023-04-29 00:00:00
almalinux
almalinux
Moderate: libxml2 security update
2023-08-01 00:00:00
Moderate: libxml2 security update
2023-01-23 00:00:00
Moderate: libxml2 security update
2023-08-08 00:00:00
ubuntu
ubuntu
libxml2 vulnerabilities
2023-04-19 00:00:00
libxml2 vulnerabilities
2022-12-05 00:00:00
libxml2 vulnerabilities
2023-06-07 00:00:00
apple
apple
About the security content of iOS 16.1.1 and iPadOS 16.1.1
2022-11-09 00:00:00
About the security content of macOS Ventura 13.0.1
2022-11-09 00:00:00
amazon
amazon
Medium: libxml2
2023-03-17 16:34:00
Medium: libxml2
2023-04-27 18:36:00
hivepro
hivepro
Apple addresses the macOS code execution flaws
2022-11-11 13:49:02
cloudlinux
cloudlinux
libxml2: Fix of 2 CVEs
2022-12-08 17:47:57
gentoo
gentoo
libxml2: Multiple Vulnerabilities
2022-10-31 00:00:00
mageia
mageia
Updated libxml2 packages fix security vulnerability
2022-11-08 22:44:28
Updated libxml2 packages fix security vulnerability
2023-05-06 21:19:07
altlinux
altlinux
Security fix for the ALT Linux 9 package libxml2 version 1:2.9.10-alt6.p9.1
2023-02-13 00:00:00
suse
suse
Security update for libxml2 (important)
2022-10-21 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-3.0-0569
2023-04-23 00:00:00