Medium ELSA-2023-0173 2 CVEs

Moderate: libxml2 security update (Oracle Linux 8)

Published Jan 16, 2023 · Updated Jan 16, 2023

Ecosystem: Oracle Linux

Summary

[2.9.7-15.1]
- Fix CVE-2022-40303 (#2136562)
- Fix CVE-2022-40304 (#2136567)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	libxml2	0:2.9.7-15.el8_7.1
Oracle Linux · 8	libxml2-devel	0:2.9.7-15.el8_7.1
Oracle Linux · 8	python3-libxml2	0:2.9.7-15.el8_7.1

Vulnerabilities 2

High 7.8

CVE-2022-40304

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, …

libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Nov 23, 2022
High 7.5

CVE-2022-40303 EPSS 41%

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE pa…

libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Nov 22, 2022