Linux · Security advisory · June 28, 2022

RLSA-2022:5250: libxml2 security update

RLSA-2022:5250, released June 28, 2022, fixes 1 CVE in libxml2 (version 0:2.9.13-1.el9_0.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0375
89th percentile

Fixed package versions

ProductReleaseFixed in
libxml2rocky 90:2.9.13-1.el9_0.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-29824 libxml2: In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check fo... 7.4 0.0375 None reported
Showing 1 to 1 of 1 1