Lucene search
Gentoo FoundationGLSA-202402-11HistoryFeb 09, 2024 - 12:00 a.m.
libxml2: Multiple Vulnerabilities
2024-02-0900:00:00
Gentoo Foundation
security.gentoo.org
5
xml c parser
gnome project
vulnerabilities
cve identifiers
upgrade
resolution
workaround
unix
Background
libxml2 is the XML C parser and toolkit developed for the GNOME project.
Description
Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details.
Impact
Please review the referenced CVE identifiers for details.
Workaround
There is no known workaround at this time.
Resolution
All libxml2 users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/libxml2-2.12.5"
If you cannot update to libxml2-2.12 yet you can update to the latest 2.11 version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/libxml2-2.11.7 =dev-libs/libxml2-2.11*"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | dev-libs/libxml2 | <Â 2.12.5 | UNKNOWN |
Related
nessus
nessus
GLSA-202402-11 : libxml2: Multiple Vulnerabilities
2024-02-09 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libxml2 (SUSE-SU-2023:2053-1)
2023-04-28 00:00:00
Debian DLA-3405-1 : libxml2 - LTS security update
2023-05-01 00:00:00
openvas
openvas
Fedora: Security Advisory for libxml2 (FEDORA-2023-a521b917c8)
2023-04-19 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2762)
2023-09-11 00:00:00
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2514)
2023-08-01 00:00:00
ubuntu
ubuntu
libxml2 vulnerabilities
2023-04-19 00:00:00
libxml2 vulnerabilities
2023-06-07 00:00:00
libxml2 vulnerability
2024-02-26 00:00:00
aix
aix
AIX is vulnerable to a denial of service due to libxml2
2023-07-25 11:08:32
AIX is vulnerable to a denial of service due to libxml2 (CVE-2024-25062)
2024-05-08 16:18:28
ibm
ibm
osv
osv
libxml2 - security update
2023-04-30 00:00:00
libxml2 vulnerabilities
2023-04-19 13:42:53
libxml2 - security update
2023-04-20 00:00:00
rocky
rocky
libxml2 security update
2023-10-06 23:10:01
libxml2 security update
2024-05-10 14:32:36
redhat
redhat
(RHSA-2023:4529) Moderate: libxml2 security update
2023-08-08 07:21:37
(RHSA-2023:4349) Moderate: libxml2 security update
2023-08-01 07:58:11
(RHSA-2024:3299) Moderate: libxml2 security update
2024-05-22 21:30:19
fedora
fedora
[SECURITY] Fedora 38 Update: libxml2-2.10.4-1.fc38
2023-04-18 01:40:06
[SECURITY] Fedora 37 Update: libxml2-2.10.4-1.fc37
2023-04-18 01:32:12
redos
redos
ROS-20230616-04
2023-06-16 00:00:00
ROS-20231013-03
2023-10-13 00:00:00
oraclelinux
oraclelinux
libxml2 security update
2023-08-02 00:00:00
libxml2 security update
2023-08-10 00:00:00
libxml2 security update
2024-05-07 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2321
2024-01-09 09:53:22
Advisory ROSA-SA-2023-2319
2023-12-26 12:04:20
github
github
Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs
2023-04-11 21:48:01
Use-after-free in libxml2 via Nokogiri::XML::Reader
2024-03-18 20:38:40
debian
debian
[SECURITY] [DLA 3405-1] libxml2 security update
2023-04-30 11:30:47
[SECURITY] [DSA 5391-1] libxml2 security update
2023-04-20 20:45:49
amazon
amazon
Medium: libxml2
2023-04-27 18:36:00
Important: libxml2
2023-10-30 23:31:00
Important: libxml2
2023-10-30 23:59:00
almalinux
almalinux
Moderate: libxml2 security update
2023-08-08 00:00:00
Moderate: libxml2 security update
2023-08-01 00:00:00
cloudfoundry
cloudfoundry
USN-6028-1: libxml2 vulnerabilities | Cloud Foundry
2023-04-29 00:00:00
USN-6658-1: libxml2 vulnerability | Cloud Foundry
2024-04-04 00:00:00
freebsd
freebsd
libxml2 -- multiple vulnerabilities
2023-04-11 00:00:00
electron{27,28} -- vulnerability in libxml2
2024-03-06 00:00:00
mageia
mageia
Updated libxml2 packages fix security vulnerability
2023-05-06 21:19:07
photon
photon
Moderate Photon OS Security Update - PHSA-2023-3.0-0569
2023-04-23 00:00:00
redhatcve
redhatcve
CVE-2023-45322
2023-10-10 04:54:39
CVE-2024-25062
2024-02-05 04:43:18
cve
cve
CVE-2023-45322
2023-10-06 22:15:11
CVE-2024-25062
2024-02-04 16:15:45
alpinelinux
alpinelinux
CVE-2023-45322
2023-10-06 22:15:11
CVE-2024-25062
2024-02-04 16:15:45
prion
prion
Design/Logic Flaw
2023-10-06 22:15:00
Design/Logic Flaw
2024-02-04 16:15:00
cbl_mariner
cbl_mariner
CVE-2023-45322 affecting package libxml2 for versions less than 2.10.4-2
2023-11-08 02:07:28
veracode
veracode
Memory Leak
2023-12-01 07:35:40
Use After Free
2024-02-06 12:32:55
cgr
cgr
CVE-2023-45322 vulnerabilities
2024-05-19 03:07:16
cloudlinux
cloudlinux
libxml2: Fix of CVE-2024-25062
2024-02-22 22:00:35
slackware
slackware
[slackware-security] libxml2
2023-12-10 01:15:09
debiancve
debiancve
CVE-2024-25062
2024-02-04 16:15:45
cvelist
cvelist
CVE-2024-25062
2024-02-04 00:00:00
CVE-2023-45322
2023-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2023-45322
2023-10-06 00:00:00