HCE2-SA-2023-0325 Moderate HCE 2.0 Security Fix(es): ** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail." (CVE-2023-45322) HCE 2.0 libxml2-2.9.12-5.r25.hce2.aarch64.rpm libxml2-devel-2.9.12-5.r25.hce2.aarch64.rpm libxml2-help-2.9.12-5.r25.hce2.noarch.rpm python3-libxml2-2.9.12-5.r25.hce2.aarch64.rpm libxml2-2.9.12-5.r25.hce2.x86_64.rpm libxml2-devel-2.9.12-5.r25.hce2.x86_64.rpm python3-libxml2-2.9.12-5.r25.hce2.x86_64.rpm