valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF
attributes. (CVE-2022-23308)
- https://bugs.mageia.org/show_bug.cgi?id=30094
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/MVLDYFVW63Y6ZSHIC6VGRIM6UJ6XLSR4/
- https://www.cve.org/CVERecord?id=CVE-2022-23308
- 8/core/libxml2-2.9.10-7.3.mga8
Get the latest Linux and open source security news straight to your inbox.