libxml2-2.9.13-6.el9

エラータID: AXSA:2024-7767:02

Release date: 
Wednesday, May 29, 2024 - 18:56
Subject: 
libxml2-2.9.13-6.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: use-after-free in XMLReader (CVE-2024-25062)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-25062
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libxml2-2.9.13-6.el9.src.rpm
    MD5: 12971d1fcdccd5f674ae7fbd8cb8c681
    SHA-256: 72a97996eb4a03f659231f1f14666e62ffc5984e83f9c9df1c8bbc5c7070ed95
    Size: 3.12 MB

Asianux Server 9 for x86_64
  1. libxml2-2.9.13-6.el9.i686.rpm
    MD5: 62d93b91493beb6c303bc4f70ca1cb90
    SHA-256: 5bf3059a8526d288bf79245e98dca6c3283636b203e46b49012088ca7c014054
    Size: 783.75 kB
  2. libxml2-2.9.13-6.el9.x86_64.rpm
    MD5: d446b7c73edcc5a6b561867af863163e
    SHA-256: 5d1c5b1053490e1d15b87bc8bf958e6e876ce8e054597f65372b745ed12dbc64
    Size: 746.21 kB
  3. libxml2-devel-2.9.13-6.el9.i686.rpm
    MD5: 8a473d5274a11d69386342a784ed9f6e
    SHA-256: c239b8f3605ffdd0cd812ea17f2efb207eeb07280d8c95ed0d49889af9d3c508
    Size: 827.21 kB
  4. libxml2-devel-2.9.13-6.el9.x86_64.rpm
    MD5: e91ba5d12e2fde0546adb5aa3d95c583
    SHA-256: a6b3e2b680e03642629a781aba3b3331d743b8e4c69b3f371a488c3512c0aa96
    Size: 827.02 kB
  5. python3-libxml2-2.9.13-6.el9.x86_64.rpm
    MD5: 5c6f91c528b5e1e1fe2b97d1e1de44a9
    SHA-256: 5685e9c7e81490da5fe8aedf1424a048e1552a4f0fe381a76c455903678ccc7f
    Size: 224.61 kB