RHSA-2022:0899: Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.Security Fix(es): libxml2: Use-after-free of ID and IDREF attributes (CVE-2022-23308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:0899?
The severity of RHSA-2022:0899 is classified as moderate.
How do I fix RHSA-2022:0899?
To fix RHSA-2022:0899, you should update the libxml2 package to version 2.9.7-12.el8_5.
Which packages are affected by RHSA-2022:0899?
The affected packages include libxml2, libxml2-debuginfo, libxml2-debugsource, libxml2-devel, python3-libxml2 and their respective debug packages.
What vulnerabilities are addressed in RHSA-2022:0899?
RHSA-2022:0899 addresses a use-after-free vulnerability of ID and IDREF attributes identified as CVE-2022-23308.
Is RHSA-2022:0899 applicable to all systems?
RHSA-2022:0899 is specifically applicable to systems using the affected versions of Red Hat's libxml2 library.