A libxml2 security update has been released for Debian GNU/Linux 8 Extended LTS to address a vulnerability that can result in denial of service.
ELA-581-1 libxml2 security update
Package libxml2
ELA-581-1 libxml2 security update
Version 2.9.1+dfsg1-5+deb8u12
Related CVEs CVE-2022-23308
One vulnerability has been discovered in the libxml2: GNOME XML library.
CVE-2022-23308
the application that validates XML using xmlTextReaderRead() with XML_PARSE_DTDATTR
and XML_PARSE_DTDVALID enabled becomes vulnerable to this use-after-free bug.
This issue can result in denial of service.
For Debian 8 jessie, these problems have been fixed in version 2.9.1+dfsg1-5+deb8u12.
We recommend that you upgrade your libxml2 packages.
Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/
