INFCSA-2025:1350: libxml2 security update
Information about definition
Identificator: INFCSA-2025:1350
Type: security
Release date: 2025-09-24 19:38:10 UTC
Information about package
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Vulnerabilities description
- CVE-2022-49043
xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
Severity level
CVE | Score CVSS 2.0 | Score CVSS 3.x | Score CVSS 4.0 |
---|---|---|---|
NIST — CVE-2022-49043
|
no information | 8.1 | no information |
Updated packages