Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

update: dev-libs/libxml2 #1302

Closed
tormath1 opened this issue Dec 19, 2023 · 0 comments · Fixed by flatcar/scripts#1535
Closed

update: dev-libs/libxml2 #1302

tormath1 opened this issue Dec 19, 2023 · 0 comments · Fixed by flatcar/scripts#1535
Labels
advisory security advisory cvss/MEDIUM >= 4 && < 7 assessed CVSS security security concerns

Comments

@tormath1
Copy link
Contributor

Name: dev-libs/libxml2
CVEs: CVE-2023-45322
CVSSs: 6.5
Action Needed: upgrade to >=2.11.5-r1

Summary: libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails.

refmap.gentoo: https://bugs.gentoo.org/915351
@tormath1 tormath1 added security security concerns advisory security advisory cvss/MEDIUM >= 4 && < 7 assessed CVSS labels Dec 19, 2023
@github-actions github-actions bot mentioned this issue Dec 22, 2023
Closed
@krnowak krnowak mentioned this issue Jan 5, 2024
Merged
2 tasks
@dongsupark dongsupark moved this from 📝 Needs Triage to ⚒️ In Progress in Flatcar tactical, release planning, and roadmap Jan 9, 2024
@github-project-automation github-project-automation bot moved this from ⚒️ In Progress to Implemented in Flatcar tactical, release planning, and roadmap Jan 11, 2024
@github-actions github-actions bot mentioned this issue Jan 22, 2024
Closed
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
advisory security advisory cvss/MEDIUM >= 4 && < 7 assessed CVSS security security concerns
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Weekly portage-stable package updates 2024-01-01 flatcar/scripts
1 participant
@tormath1