Red Hat Security Advisory

RHSA-2022:5250

libxml2 security update

Released 2022-07-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libxml2-devel-2.9.13-1.el9_0.1
Red Hat Enterprise Linux BaseOS (v. 9) libxml2-2.9.13-1.el9_0.1, python3-libxml2-2.9.13-1.el9_0.1

TI-2022-12184 CVE-2022-29824 · GHSA-3rrw-pv9w-qgch

LOW 35

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03753 Published 2022-05-03 Partial fix CWE-190