[CLSA-2022:1670523403] libxml2: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2022-12-08
Description:
- CVE-2022-40303: fix integer overflows with XML_PARSE_HUGE - CVE-2022-40304: fix dict corruption caused by entity reference cycles
Updated packages:
  • libxml2-2.9.7-9.el8_4.2.tuxcare.els4.i686.rpm
    sha:2e6da4330010ff7ad1ee9659bd1e282097c13594
  • libxml2-2.9.7-9.el8_4.2.tuxcare.els4.x86_64.rpm
    sha:869eb116c08c14093be496b4f5a90ae9f77acd92
  • libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els4.i686.rpm
    sha:209c554a8f42fae3f03ba085d623bd9c2d8e6f94
  • libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els4.x86_64.rpm
    sha:9f033ba775688f33424eb319e64d2b909a52dd52
  • libxml2-static-2.9.7-9.el8_4.2.tuxcare.els4.x86_64.rpm
    sha:586f4f0356348101ca0021b57003d6ec8eeda51e
  • python3-libxml2-2.9.7-9.el8_4.2.tuxcare.els4.x86_64.rpm
    sha:2f5dd03d16e67f711217f419cb6ee596ff285516
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.