libxml2 - security update

Fixed packages 1

Vulnerabilities 5

• High 8.8
  CVE-2017-5130

  An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other pr…

  chromium-browser oxide-qt libxml2 libxml2 Browsers Debian Ubuntu
  Feb 7, 2018
• High 7.5
  CVE-2017-16932

  Nokogiri gem, via libxml, is affected by DoS vulnerabilities

  parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

  libxml2 libxml2 clamav nokogiri Debian Ubuntu Alpine RubyGems
  Nov 23, 2017
• High 7.5
  CVE-2022-23308

  valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

  qt5-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine
  Feb 26, 2022
• Medium 5.5
  CVE-2016-9318

  libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indi…

  libxml2 libxml2 libxml2 Debian Ubuntu Alpine
  Nov 16, 2016
• Unscored —
  CVE-2017-5969

  libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereferenc…

  libxml2 libxml2 libxml2 Debian Ubuntu Alpine
  Apr 11, 2017