ALT Linux Team

Package libxml2 update in sisyphus on 2024-08-22

ALT-PU-2024-11515-1

Package libxml2 updated to version 2.12.9-alt1 for branch sisyphus in task 355784.

Closed vulnerabilities

Published: 2024-12-23
Modified: 2025-02-28

CVE-2024-40896

In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.

References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top