Login
All errata/sisyphus/ALT-PU-2024-8098-2
ALT-PU-2024-8098-2

Package update libxml2 in branch sisyphus

Version2.12.7-alt1
Task#348549
Published2026-07-02
Max severityHIGH
Severity:

Closed issues (2)

BDU:2026-08991
HIGH7.5

Уязвимость функции xmlHTMLPrintFileContext() компонента xmllint библиотеки Libxml2, позволяющая нарушителю раскрыть конфиденциальную информацию или повысить свои привилегии

Published: 2026-06-30Modified: 2026-08-25
CVSS 3.xHIGH 7.5
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0HIGH 7.8
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N
References
CVE-2024-34459
HIGH7.5

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

Published: 2024-05-14Modified: 2026-10-14
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References