RHSA-2023:0173: Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.Security Fix(es): libxml2: integer overflows with XMLPARSEHUGE (CVE-2022-40303) libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0173?
The severity of RHSA-2023:0173 is rated as moderate.
How do I fix RHSA-2023:0173?
To fix RHSA-2023:0173, you need to update the libxml2 package to the version 2.9.7-15.el8_7.1 or later.
What vulnerabilities are addressed in RHSA-2023:0173?
RHSA-2023:0173 addresses CVE-2022-40303 and CVE-2022-40304 vulnerabilities in the libxml2 library.
What is affected by RHSA-2023:0173?
RHSA-2023:0173 affects the libxml2 library and its related packages available in Red Hat Enterprise Linux.
Is there a risk of exploitation with RHSA-2023:0173?
Yes, there is a risk of exploitation due to the vulnerabilities fixed in RHSA-2023:0173 if the updates are not applied.