Lucene search

Gentoo FoundationMGASA-2024-0211

HistoryJun 06, 2024 - 6:48 p.m.

Updated libxml2 packages fix security vulnerability

2024-06-0618:48:22

Gentoo Foundation

advisories.mageia.org

libxml2

security vulnerability

buffer over-read

xmllint

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

The updated packages fix a security vulnerability: An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c. (CVE-2024-34459)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchlibxml2< 2.10.4-1.4libxml2-2.10.4-1.4.mga9

OS	Version	Architecture	Package	Version	Filename
Mageia	9	noarch	libxml2	< 2.10.4-1.4	libxml2-2.10.4-1.4.mga9

References

bugs.mageia.org/show_bug.cgi?id=33238

gitlab.gnome.org/GNOME/libxml2/-/issues/720

lists.fedoraproject.org/archives/list/[email protected]/message/INKSSLW5VMZIXHRPZBAW4TJUX5SQKARG/