Alpine/qt5-qtwebengine: high 7.5

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

Action: Upgrade qt5-qtwebengine to 5.15.11-r13 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-23308#Alpine:v3.18/qt5-qtwebengine
• https://security.alpinelinux.org/vuln/CVE-2022-23308

published 2022-02-26T05:15:08.280Z · modified 2026-11-03T07:30:32.391449823Z · JSON