<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="sa-render.xsl"?>
  <update from="huaweicloud.com" type="security" status="stable" version="1">
    <id>HCE2-SA-2024-0089</id>
    <title>An update for libxml2 is now available for HCE 2.0</title>
    <severity>Important</severity>
    <release>HCE 2.0</release>
    <issued date="2024-03-26 06:00:42"/>
    <updated date="2024-03-26 06:00:42"/>
    <references>
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2024-25062" id="CVE-2024-25062" title="CVE-2024-25062 Base Score: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" type="cve"/>
    </references>
    <description>Security Fix(es):

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free. (CVE-2024-25062)
</description>
    <pkglist>
      <collection short="HCE 2.0" package="libxml2">
        <name>HCE 2.0</name>
        <package arch="aarch64" name="libxml2" version="2.9.12" release="5.r27.hce2">
          <filename>libxml2-2.9.12-5.r27.hce2.aarch64.rpm</filename>
        </package>
        <package arch="aarch64" name="libxml2-devel" version="2.9.12" release="5.r27.hce2">
          <filename>libxml2-devel-2.9.12-5.r27.hce2.aarch64.rpm</filename>
        </package>
        <package arch="noarch" name="libxml2-help" version="2.9.12" release="5.r27.hce2">
          <filename>libxml2-help-2.9.12-5.r27.hce2.noarch.rpm</filename>
        </package>
        <package arch="aarch64" name="python3-libxml2" version="2.9.12" release="5.r27.hce2">
          <filename>python3-libxml2-2.9.12-5.r27.hce2.aarch64.rpm</filename>
        </package>
        <package arch="x86_64" name="libxml2" version="2.9.12" release="5.r27.hce2">
          <filename>libxml2-2.9.12-5.r27.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="libxml2-devel" version="2.9.12" release="5.r27.hce2">
          <filename>libxml2-devel-2.9.12-5.r27.hce2.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="python3-libxml2" version="2.9.12" release="5.r27.hce2">
          <filename>python3-libxml2-2.9.12-5.r27.hce2.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
