Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-20587

Высокий

ALT-PU-2026-20587: package libxml2 update to version 2.9.14-alt1.p10.1

Источник
errata.altlinux.org
Дата публикации
05.11.2026
Дата обновления
05.11.2026
Устраненные уязвимости
15
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades libxml2 to version 2.9.14-alt1.p10.1.

Устраненные уязвимости15

Ссылки1

ALT-PU-2026-20587https://errata.altlinux.org/ALT-PU-2026-20587

Связанные уязвимости

altlinux логотип

ALT-PU-2026-19670

CVSS3: 9.1
altlinux
11 дней назад

ALT-PU-2026-19670: package `libxml2` update to version 2.12.10-alt3

ubuntu логотип

CVE-2023-39615

CVSS3: 6.5
ubuntu
около 3 лет назад

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

redhat логотип

CVE-2023-39615

CVSS3: 6.5
redhat
около 3 лет назад

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

nvd логотип

CVE-2023-39615

CVSS3: 6.5
nvd
около 3 лет назад

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

msrc логотип

CVE-2023-39615

msrc
3 месяца назад

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.