[SECURITY] [DLA 2972-1] libxml2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2972-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky April 08, 2022 https://wiki.debian.org/LTS -...

DLA-2972-1 libxml2 - security update

Bulletin has no description...

PT-2022-37441

Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.6.39 libzypp versions prior to 16.22.4 Description The issue concerns memory leaks in SWIG generated code and misparsing of '&' in attributes with libxml2. It also involves fixing split provides not working if the...

libxml2:xml: Heap-use-after-free in xmlFreeNodeList

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6014843229962240 Project: libxml2 Fuzzing Engine: afl Fuzz Target: xml Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61500003d618 Crash Stat...

Security Bulletin: IBM QRadar Network Security is affected by an arbitrary code execution vulnerability (CVE-2016-4658)

Summary IBM QRadar Network Security is affected by a vulnerability in the libxml2 library that may allow arbitrary code execution. IBM QRadar Network Security has addressed this issue with a firmware update. Vulnerability Details CVEID: CVE-2016-4658 DESCRIPTION: The libxml2 library, as used in...

Important Photon OS Security Update - PHSA-2022-0167

Updates of 'libxml2', 'haproxy' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0167

Updates of 'libxml2', 'haproxy' packages of Photon OS have been released...

libxml2 Heap Overflow DoS

The vulnerability of the valid.c file in the XML document analysis library libxml2 relates to memory usage after deallocation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially created XML file...

openSUSE: Security Advisory for python-libxml2-python (openSUSE-SU-2022:0802-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libxml2 (FEDORA-2022-050c712ed7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-23308 affecting package libxml2 2.9.12-1

CVE-2022-23308 affecting package libxml2 2.9.12-1. An upgraded version of the package is available that resolves this issue...

libxml2:schema: Segv on unknown address in ld-linux-x86-64.so.2

Detailed Report: https://oss-fuzz.com/testcase?key=5557530963607552 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ld-linux-x86-64.so.2 ld-linux-x86-64.so.2...

libxml2:schema: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5289624191238144 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash...

OESA-2022-1579 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

Vulnerability fixed in libxml2

A vulnerability has been fixed in libxml2. The vulnerability allows a remote malicious party the ability to cause a denial-of-service cause. The developers of libxml2 have released an update to fix the vulnerability: https://gitlab.gnome.org/GNOME/libxml2/-/commit...

libxml2 security update

2.9.7-12 - Fix CVE-2022-23308 2057663 2.9.7-11 - Fix CVE-2021-3541 1958783 2.9.7-10 - Fix CVE-2021-3516 1956976 - Fix CVE-2021-3517 1957001 - Fix CVE-2021-3518 1957028 - Fix CVE-2021-3537 1957284...

Important Photon OS Security Update - PHSA-2022-0479

Updates of 'openssl' packages of Photon OS have been released...

Moderate: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

libxml2: Use-after-free of ID and IDREF attributes

A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XMLPARSEDTDVALID option and without the XMLPARSENOENT option, resulting in a use-after-free issue...

ALSA-2022:0899 Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Use-after-free of ID and IDREF attributes CVE-2022-23308 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...