Medium ELSA-2023-4349 2 CVEs

Moderate: libxml2 security update (Oracle Linux 9)

Published Aug 2, 2023 · Updated Aug 2, 2023

Ecosystem: Oracle Linux

Summary

[2.9.13-3.1]
- Fix CVE-2023-28484 (#2186694)
- Fix CVE-2023-29469 (#2186694)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	libxml2	0:2.9.13-3.el9_2.1
Oracle Linux · 9	libxml2-devel	0:2.9.13-3.el9_2.1
Oracle Linux · 9	python3-libxml2	0:2.9.13-3.el9_2.1

Vulnerabilities 2

Medium 6.5

CVE-2023-28484

In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequentl…

libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Apr 24, 2023
Medium 6.5

CVE-2023-29469

An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictCom…

qt5-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Apr 24, 2023