Test ID:	1.3.6.1.4.1.25623.1.0.820576
Category:	Fedora Local Security Checks
Title:	Fedora: Security Advisory for libxml2 (FEDORA-2022-9136d646e4)
Summary:	The remote host is missing an update for the 'libxml2'; package(s) announced via the FEDORA-2022-9136d646e4 advisory.
Description:	Summary: The remote host is missing an update for the 'libxml2' package(s) announced via the FEDORA-2022-9136d646e4 advisory. Vulnerability Insight: This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library. Affected Software/OS: 'libxml2' package(s) on Fedora 36. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-29824 https://security.netapp.com/advisory/ntap-20220715-0006/ Debian Security Information: DSA-5142 (Google Search) https://www.debian.org/security/2022/dsa-5142 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/ https://security.gentoo.org/glsa/202210-03 http://packetstormsecurity.com/files/169825/libxml2-xmlParseNameComplex-Integer-Overflow.html http://packetstormsecurity.com/files/167345/libxml2-xmlBufAdd-Heap-Buffer-Overflow.html https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14 https://gitlab.gnome.org/GNOME/libxslt/-/tags https://www.oracle.com/security-alerts/cpujul2022.html https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.