Advisory ROSA-SA-2024-2321

software: libxml2 2.9.14
OS: ROSA-CHROME

package_evr_string: libxml2-2.9.14-4.src.rpm

CVE-ID: CVE-2023-28484
BDU-ID: 2023-03298
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the xmlSchemaFixupComplexType (xmlschemas.c) function of the Libxml2 library is related to null pointer dereferencing. Exploitation of the vulnerability allows an attacker acting remotely to cause a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update libxml2

CVE-ID: CVE-2023-29469
BDU-ID: 2023-03302
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the xmlDictComputeFastKey (dict.c) function of the Libxml2 library is related to a memory re-release error when handling dict empty string hashes. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update libxml2