Red Hat Security Advisory

RHSA-2022:5317

libxml2 security update

Released 2022-06-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libxml2-devel-2.9.7-13.el8_6.1
Red Hat Enterprise Linux BaseOS (v. 8) libxml2-2.9.7-13.el8_6.1, python3-libxml2-2.9.7-13.el8_6.1

TI-2022-12184 CVE-2022-29824 · GHSA-3rrw-pv9w-qgch

LOW 35

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03753 Published 2022-05-03 Partial fix CWE-190