Medium ELSA-2025-1517 1 CVE

Moderate: libxml2 security update (Oracle Linux 8)

Published Feb 17, 2025 · Updated Feb 17, 2025

Ecosystem: Oracle Linux

Summary

[2.9.7-18.2]
- Fix CVE-2022-49043 (RHEL-76289)

[2.9.7-18.1]
- Fix CVE-2024-25062 (RHEL-31056)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	libxml2	0:2.9.7-18.el8_10.2
Oracle Linux · 8	libxml2-devel	0:2.9.7-18.el8_10.2
Oracle Linux · 8	python3-libxml2	0:2.9.7-18.el8_10.2

Vulnerabilities 1

High 8.1

CVE-2022-49043

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux

Jan 26, 2025