Red Hat Security Advisory

RHSA-2023:4529

libxml2 security update

Released 2023-08-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libxml2-devel-2.9.7-16.el8_8.1
Red Hat Enterprise Linux BaseOS (v. 8) libxml2-2.9.7-16.el8_8.1, python3-libxml2-2.9.7-16.el8_8.1

TI-2023-13846 CVE-2023-29469 · GHSA-7jv7-hr35-fwjr

LOW 31

An issue was discovered in libxml2 before 2.10.4.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01309 Published 2023-04-24 Partial fix CWE-415

TI-2023-13024 CVE-2023-28484 · GHSA-7cv2-wjgm-j7rm

LOW 31

In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01245 Published 2023-04-24 Partial fix CWE-476