Every CVE Search/ Get API key

CVE-2025-24928

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in...

7.8 HighFix available

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.39%Up 0.3 points since Feb 19, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
CVE-2025-24928
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-121
Updated
2026-11-02
EUVDEUVD-2025-4764 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
EUVD-2025-4764
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-fgfv-9xqc-v794 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in...

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
GHSA-fgfv-9xqc-v794
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-121
Updated
2026-11-02
NVD 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
CVE-2025-24928
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-121
Updated
2026-11-02
OSVALPINE-CVE-2025-24928 7.7

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
ALPINE-CVE-2025-24928
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-03
OSVBELL-CVE-2025-24928 7.7
Record
BELL-CVE-2025-24928
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
Show 46 moreShow less
OSV 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
CVE-2025-24928
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Weakness
CWE-121
Updated
2026-11-02
OSVDEBIAN-CVE-2025-24928 7.7

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
DEBIAN-CVE-2025-24928
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVJLSEC-2025-87 7.7

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in...

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
JLSEC-2025-87
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-1225 7.8

libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.

Security Fix(es):

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2024-56171)

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.(CVE-2025-24928)

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.(CVE-2025-27113)

Record
OESA-2025-1225
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHBA-2025:6597 9.1

Red Hat Bug Fix Advisory: libxml2 bug fix and enhancement update

Record
RHBA-2025:6597
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2482 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2482
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2483 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2483
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2507 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2507
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2513 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2513
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2654 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2654
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2660 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2660
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2673 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2673
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2678 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2678
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2679 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2679
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:2686 8.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:2686
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:2679 8.1

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Use-After-Free in libxml2 (CVE-2024-56171)

  • libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:2679
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:2686 8.1

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Use-After-Free in libxml2 (CVE-2024-56171)

  • libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:2686
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-ALPINE-315-CVE-2025-24928 7.7

CVE-2025-24928 in libxml2 - Patched by Root

Root has patched CVE-2025-24928 in the libxml2 package for Root:Alpine:3.15. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-315-CVE-2025-24928
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-24928 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
UBUNTU-CVE-2025-24928
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVALSA-2025:2679 No score

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Use-After-Free in libxml2 (CVE-2024-56171)
  • libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:2679
Updated
2026-11-02
OSVALSA-2025:2686 No score

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Use-After-Free in libxml2 (CVE-2024-56171)
  • libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:2686
Updated
2026-11-02
OSVAZL-56931 No score

CVE-2025-24928 affecting package libxml2 for versions less than 2.10.4-6

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
AZL-56931
Updated
2026-11-02
OSVAZL-57031 No score

CVE-2025-24928 affecting package libxml2 for versions less than 2.11.5-4

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
AZL-57031
Updated
2026-11-05
OSVBIT-java-2025-24928 No score

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
BIT-java-2025-24928
Updated
2026-11-02
OSVBIT-java-min-2025-24928 No score

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
BIT-java-min-2025-24928
Updated
2026-11-02
OSVBIT-jre-2025-24928 No score

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Record
BIT-jre-2025-24928
Updated
2026-11-02
OSVCLSA-2025-1741286239 No score

Fix of 5 CVEs

  • SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext
    • debian/patches/CVE-2024-34459.patch: Fix buffer overread with xmllint --htmlout by adding a missing bounds check
    • CVE-2024-34459
  • SECURITY UPDATE: use-after-free vulnerability in xinclude.c
    • debian/patches/CVE-2022-49043.patch: Fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free
    • CVE-2022-49043
  • SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in valid.c
    • debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in xmlSnprintfElements caused by improperly calculating qname length
    • CVE-2025-24928
  • SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c
    • debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child axis to generate XML_OP_ELEM like the case without an axis
    • CVE-2025-27113
  • SECURITY UPDATE: use-after-free vulnerability in XML schema processing
    • debian/patches/CVE-2024-56171.patch: Fix use-after-free after xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables
    • CVE-2024-56171
Record
CLSA-2025-1741286239
Updated
2026-11-02
OSVCLSA-2025-1741286348 No score

Fix of 5 CVEs

  • SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext
    • debian/patches/CVE-2024-34459.patch: Fix buffer overread with xmllint --htmlout by adding a missing bounds check
    • CVE-2024-34459
  • SECURITY UPDATE: use-after-free vulnerability in xinclude.c
    • debian/patches/CVE-2022-49043.patch: Fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free
    • CVE-2022-49043
  • SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in valid.c
    • debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in xmlSnprintfElements caused by improperly calculating qname length
    • CVE-2025-24928
  • SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c
    • debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child axis to generate XML_OP_ELEM like the case without an axis
    • CVE-2025-27113
  • SECURITY UPDATE: use-after-free vulnerability in XML schema processing
    • debian/patches/CVE-2024-56171.patch: Fix use-after-free after xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables
    • CVE-2024-56171
Record
CLSA-2025-1741286348
Updated
2026-11-02
OSVCLSA-2025-1742379480 No score

libxml2: Fix of 2 CVEs

  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
Record
CLSA-2025-1742379480
Updated
2026-11-02
OSVCLSA-2025-1742466508 No score

libxml2: Fix of 2 CVEs

  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
Record
CLSA-2025-1742466508
Updated
2026-11-02
OSVCLSA-2025-1742466608 No score

libxml2: Fix of 2 CVEs

  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
Record
CLSA-2025-1742466608
Updated
2026-11-02
OSVCLSA-2025-1742918628 No score

libxml2: Fix of CVE-2025-24928

  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
Record
CLSA-2025-1742918628
Updated
2026-11-02
OSVCLSA-2025-1755708467 No score

libxml2: Fix of 2 CVEs

  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
Record
CLSA-2025-1755708467
Updated
2026-11-02
OSVCLSA-2025-1761859779 No score

libxml2: Fix of 2 CVEs

  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
Record
CLSA-2025-1761859779
Updated
2026-11-02
OSVCLSA-2025-1763031933 No score

libxml2: Fix of 3 CVEs

  • CVE-2025-9714: additional fixes
  • CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c
  • CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
Record
CLSA-2025-1763031933
Updated
2026-11-02
OSVCLSA-2026-1788943516 No score

Fix CVE(s): CVE-2026-86140

  • SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements
    • debian/patches/CVE-2026-86140.patch: bounds-check the space left in the output buffer in valid.c before the strcat() of the opening and closing parenthesis in xmlSnprintfElements(), returning early with an ellipsis when there is not enough room, matching the guards CVE-2025-24928 added to the sibling xmlSnprintfElementContent()
    • CVE-2026-86140
Record
CLSA-2026-1788943516
Updated
2026-11-02
OSVCLSA-2026-1789463267 No score

Fix CVE(s): CVE-2026-86140

  • SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements()
    • debian/patches/CVE-2026-86140.patch: add the missing remaining-space checks around the strcat() calls that wrap the node loop in xmlSnprintfElements() in valid.c, matching the guards CVE-2025-24928 already added to xmlSnprintfElementContent()
    • CVE-2026-86140
Record
CLSA-2026-1789463267
Updated
2026-11-02
OSVCLSA-2026-1789655873 No score

libxml2: Fix of 4 CVEs

  • CVE-2026-86140: add the missing bounds checks around the two unguarded strcat() calls in xmlSnprintfElements(), the sibling of the function fixed for CVE-2025-24928
  • CVE-2026-86142: reject a saturated xmlStrlen() result in xmlXPtrEvalXPtrPart() before it is used to size the XPointer buffer
  • CVE-2026-86143: check the xmlBufUse() length against INT_MAX before narrowing it to the int parameter of the output writecallback, at all six call sites
  • CVE-2026-86144: propagate the document parseFlags through xmlXIncludeProcess(), xmlXIncludeProcessTree() and xmlXIncludeLoadTxt() so XML_PARSE_NONET is honoured during XInclude resolution
Record
CLSA-2026-1789655873
Updated
2026-11-02
OSVMGASA-2025-0073 No score

Updated libxml2 packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Use-after-free in xmlSchemaIDCFillNodeTables. (CVE-2024-56171) Stack-buffer-overflow in xmlSnprintfElements. (CVE-2025-24928) Null-deref in xmlPatMatch. (CVE-2025-27113)

Record
MGASA-2025-0073
Updated
2026-11-02
OSVopenSUSE-SU-2025:14830-1 No score

libxml2-2-2.13.6-1.1 on GA media

These are all security issues fixed in the libxml2-2-2.13.6-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14830-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14999-1 No score

python-lxml-doc-5.3.2-1.1 on GA media

These are all security issues fixed in the python-lxml-doc-5.3.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14999-1
Updated
2026-11-02
OSVSUSE-SU-2025:0746-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418).
Record
SUSE-SU-2025:0746-1
Updated
2026-11-02
OSVSUSE-SU-2025:0747-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418).
Record
SUSE-SU-2025:0747-1
Updated
2026-11-02
OSVSUSE-SU-2025:0748-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418).
Record
SUSE-SU-2025:0748-1
Updated
2026-11-02
OSVSUSE-SU-2025:0976-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: Fixed NULL Pointer Dereference in libxml2 xmlPatMatch (bsc#1237418).
Record
SUSE-SU-2025:0976-1
Updated
2026-11-02
OSVSUSE-SU-2025:20177-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  • CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  • CVE-2025-27113: Fixed NULL Pointer Dereference in xmlPatMatch (bsc#1237418).
Record
SUSE-SU-2025:20177-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libxml2
Alpine:v3.18
 2.13.0 up to 2.11.8-r1
2.11.8-r1
libxml2
Alpine:v3.19
 2.13.0 up to 2.11.8-r1
2.11.8-r1
libxml2
Alpine:v3.20
 2.13.0 up to 2.12.7-r1
2.12.7-r1
libxml2
Alpine:v3.21
 2.13.0 up to 2.13.4-r4
2.13.4-r4
libxml2
Alpine:v3.22
 2.13.0 up to 2.13.6-r0
2.13.6-r0
libxml2
Alpine:v3.23
 2.13.0 up to 2.13.6-r0
2.13.6-r0
libxml2
Alpine:v3.24
 2.13.0 up to 2.13.6-r0
2.13.6-r0
qt6-qtwebengine
Alpine:v3.22
 before 6.8.3-r5
6.8.3-r5
qt6-qtwebengine
Alpine:v3.23
 before 6.10.0-r1
6.10.0-r1
qt6-qtwebengine
Alpine:v3.24
 before 6.10.0-r1
6.10.0-r1
Show 278 moreShow less
Affected packages
PackageAffectedFixed
libxml2
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.13-6.el9_5.2
2.9.13-6.el9_5.2
libxml2-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.13-6.el9_5.2
2.9.13-6.el9_5.2
python3-libxml2
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.13-6.el9_5.2
2.9.13-6.el9_5.2
libxml2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.7-19.el8_10
2.9.7-19.el8_10
libxml2-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.7-19.el8_10
2.9.7-19.el8_10
python3-libxml2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.9.7-19.el8_10
2.9.7-19.el8_10
libxml2
Azure Linux:2
 before 2.10.4-6
2.10.4-6
libxml2
Azure Linux:3
 before 2.11.5-4
2.11.5-4
libxml2
Alpaquita:23
 2.10.3-r2 up to 2.10.4-r2
2.10.4-r2
libxml2
Alpaquita:stream
 2.10.3-r2 up to 2.13.6-r0
2.13.6-r0
libxml2
BellSoft Hardened Containers:23
 2.10.3-r2 up to 2.10.4-r2
2.10.4-r2
libxml2
BellSoft Hardened Containers:stream
 2.10.3-r2 up to 2.13.6-r0
2.13.6-r0
java
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
java-min
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
jre
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
libxml2
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
libxml2-dev
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
libxml2-doc
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
libxml2-utils
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
python-libxml2
TuxCare:Ubuntu:16.04
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8
libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
libxml2-dev
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
libxml2-doc
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
libxml2-utils
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
python-libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
python3-libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2
libxml2
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2-devel
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2-static
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
python3-libxml2
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 2.9.7-18.el8.tuxcare.els3
2.9.7-18.el8.tuxcare.els3
libxml2-devel
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 2.9.7-18.el8.tuxcare.els3
2.9.7-18.el8.tuxcare.els3
libxml2-static
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 2.9.7-18.el8.tuxcare.els3
2.9.7-18.el8.tuxcare.els3
python3-libxml2
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 2.9.7-18.el8.tuxcare.els3
2.9.7-18.el8.tuxcare.els3
libxml2
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
python3-libxml2
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els8
2.9.7-9.el8_4.2.tuxcare.els8
libxml2
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els4
2.9.13-3.el9_2.1.tuxcare.els4
libxml2-devel
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els4
2.9.13-3.el9_2.1.tuxcare.els4
libxml2-static
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els4
2.9.13-3.el9_2.1.tuxcare.els4
python3-libxml2
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els4
2.9.13-3.el9_2.1.tuxcare.els4
libxml2
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.9.1-6.0.3.el7_9.6.tuxcare.els6
2.9.1-6.0.3.el7_9.6.tuxcare.els6
libxml2-devel
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.9.1-6.0.3.el7_9.6.tuxcare.els6
2.9.1-6.0.3.el7_9.6.tuxcare.els6
libxml2-python
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.9.1-6.0.3.el7_9.6.tuxcare.els6
2.9.1-6.0.3.el7_9.6.tuxcare.els6
libxml2-static
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 2.9.1-6.0.3.el7_9.6.tuxcare.els6
2.9.1-6.0.3.el7_9.6.tuxcare.els6
libxml2
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.7.6-21.el6_8.1.tuxcare.els12
2.7.6-21.el6_8.1.tuxcare.els12
libxml2-devel
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.7.6-21.el6_8.1.tuxcare.els12
2.7.6-21.el6_8.1.tuxcare.els12
libxml2-python
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.7.6-21.el6_8.1.tuxcare.els12
2.7.6-21.el6_8.1.tuxcare.els12
libxml2-static
TuxCare:CentOS:6
From an advisory covering 2 CVEs
 before 2.7.6-21.el6_8.1.tuxcare.els12
2.7.6-21.el6_8.1.tuxcare.els12
libxml2
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
libxml2-devel
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
libxml2-python
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
libxml2-static
TuxCare:OracleLinux:6
From an advisory covering 3 CVEs
 before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13
libxml2
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
libxml2-dev
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
libxml2-doc
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
libxml2-utils
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
python-libxml2
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
python3-libxml2
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
libxml2-dev
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
libxml2-doc
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
libxml2-utils
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
python-libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
python3-libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9
libxml2
TuxCare:AlmaLinux:9.6
From an advisory covering 5 CVEs
 before 2.9.13-12.el9_6.tuxcare.els9
2.9.13-12.el9_6.tuxcare.els9
libxml2-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 5 CVEs
 before 2.9.13-12.el9_6.tuxcare.els9
2.9.13-12.el9_6.tuxcare.els9
libxml2-static
TuxCare:AlmaLinux:9.6
From an advisory covering 5 CVEs
 before 2.9.13-12.el9_6.tuxcare.els9
2.9.13-12.el9_6.tuxcare.els9
python3-libxml2
TuxCare:AlmaLinux:9.6
From an advisory covering 5 CVEs
 before 2.9.13-12.el9_6.tuxcare.els9
2.9.13-12.el9_6.tuxcare.els9
libxml2
Debian:12
 before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
libxml2
Debian:13
 before 2.12.7+dfsg+really2.9.14-0.4
2.12.7+dfsg+really2.9.14-0.4
libxml2
Debian:14
 before 2.12.7+dfsg+really2.9.14-0.4
2.12.7+dfsg+really2.9.14-0.4
libxml2
Debian:11
From an advisory covering 7 CVEs
 before 2.9.10+dfsg-6.7+deb11u6, plus listed versions
2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u12.9.10+dfsg-6.7+deb11u22.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u42.9.10+dfsg-6.7+deb11u5
2.9.10+dfsg-6.7+deb11u6
libxml2
Debian:12
From an advisory covering 10 CVEs
 before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
XML2_jll
Julia
 before 2.13.6+1
2.13.6+1
libxml2
Mageia:9
From an advisory covering 3 CVEs
 before 2.10.4-1.6.mga9
2.10.4-1.6.mga9
libxml2
openEuler:22.03-LTS-SP4
From an advisory covering 3 CVEs
 before 2.9.14-15.oe2203sp4
2.9.14-15.oe2203sp4
libxml2
openEuler:24.03-LTS
From an advisory covering 3 CVEs
 before 2.11.9-2.oe2403sp1
2.11.9-2.oe2403sp1
libxml2
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 2.11.9-2.oe2403sp1
2.11.9-2.oe2403sp1
libxml2
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 2.9.10-43.oe2003sp4
2.9.10-43.oe2003sp4
libxml2
openEuler:22.03-LTS-SP3
From an advisory covering 3 CVEs
 before 2.9.14-15.oe2203sp3
2.9.14-15.oe2203sp3
libxml2-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
python3-libxml2-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
python3-libxml2
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2-static
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 0:2.12.5-5.el10_0
0:2.12.5-5.el10_0
libxml2-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-debugsource
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-debugsource
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
python3-libxml2
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.6
0:2.9.13-3.el9_2.6
libxml2-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-devel
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
python3-libxml2-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-debugsource
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
python3-libxml2
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
python3-libxml2-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.4
0:2.9.13-1.el9_0.4
libxml2-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-devel
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-debuginfo
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-debugsource
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
python3-libxml2
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
python3-libxml2-debuginfo
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:2.9.7-16.el8_8.7
0:2.9.7-16.el8_8.7
libxml2-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-devel
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-devel
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-devel
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debugsource
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-13.el8_6.8
0:2.9.7-13.el8_6.8
libxml2-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-devel
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-debuginfo
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-debugsource
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
python3-libxml2
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_2.1
0:2.9.7-9.el8_2.1
libxml2-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-devel
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-devel
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-devel
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debuginfo
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2-debugsource
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-9.el8_4.5
0:2.9.7-9.el8_4.5
libxml2
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-debuginfo
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-devel
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-python
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-static
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:2.9.1-6.el7_9.9
0:2.9.1-6.el7_9.9
libxml2-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-debugsource
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
python3-libxml2
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 3 CVEs
 before 0:2.9.13-9.el9_4
0:2.9.13-9.el9_4
libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
python3-libxml2
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
python3-libxml2
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.9.13-6.el9_5.2
0:2.9.13-6.el9_5.2
libxml2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.9.7-19.el8_10
0:2.9.7-19.el8_10
libxml2
Root:Alpine:3.15
 before 2.9.14-r20071
2.9.14-r200712.9.14-r20072
rootio-libxml2
Root:Alpine:3.15
 before 2.9.14-r20071
2.9.14-r200712.9.14-r20072
libxml2
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Module for Python 3 15 SP6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2-python
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 2.10.3-150500.5.23.1
2.10.3-150500.5.23.1
libxml2
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.9.4-46.81.1
2.9.4-46.81.1
python-libxml2
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 3 CVEs
 before 2.9.4-46.81.1
2.9.4-46.81.1
libxml2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 3 CVEs
 before 2.9.4-46.81.1
2.9.4-46.81.1
python-libxml2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 3 CVEs
 before 2.9.4-46.81.1
2.9.4-46.81.1
libxml2
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Manager Proxy 4.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Manager Proxy 4.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Manager Server 4.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2-python
SUSE:Manager Server 4.3
From an advisory covering 3 CVEs
 before 2.9.14-150400.5.38.1
2.9.14-150400.5.38.1
libxml2
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
python-libxml2-python
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 2.9.7-150000.3.76.1
2.9.7-150000.3.76.1
libxml2
SUSE:Linux Micro 6.0
From an advisory covering 3 CVEs
 before 2.11.6-5.1
2.11.6-5.1
libxml2
SUSE:Linux Micro 6.1
From an advisory covering 3 CVEs
 before 2.11.6-slfo.1.1_2.1
2.11.6-slfo.1.1_2.1
libxml2
Ubuntu:Pro:14.04:LTS
 before 2.9.1+dfsg1-3ubuntu4.13+esm7, plus listed versions
2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2
Show 17 moreShow less
2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm6
2.9.1+dfsg1-3ubuntu4.13+esm7
libxml2
Ubuntu:Pro:16.04:LTS
 before 2.9.3+dfsg1-1ubuntu0.7+esm7, plus listed versions
2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1
Show 13 moreShow less
2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm6
2.9.3+dfsg1-1ubuntu0.7+esm7
libxml2
Ubuntu:Pro:18.04:LTS
 before 2.9.4+dfsg1-6.1ubuntu1.9+esm2, plus listed versions
2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1
Show 10 moreShow less
2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm1
2.9.4+dfsg1-6.1ubuntu1.9+esm2
libxml2
Ubuntu:20.04:LTS
 before 2.9.10+dfsg-5ubuntu0.20.04.9, plus listed versions
2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3
Show 11 moreShow less
2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.8
2.9.10+dfsg-5ubuntu0.20.04.9
libxml2
Ubuntu:22.04:LTS
 before 2.9.13+dfsg-1ubuntu0.6, plus listed versions
2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1
Show 5 moreShow less
2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.5
2.9.13+dfsg-1ubuntu0.6
libxml2
Ubuntu:24.04:LTS
 before 2.9.14+dfsg-1.3ubuntu3.2, plus listed versions
2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu12.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.1
2.9.14+dfsg-1.3ubuntu3.2
libxml2
Ubuntu:Pro:14.04:LTS
From an advisory covering 5 CVEs
 before 2.9.1+dfsg1-3ubuntu4.13+esm7, plus listed versions
2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2
Show 17 moreShow less
2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm6
2.9.1+dfsg1-3ubuntu4.13+esm7
libxml2
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+esm7, plus listed versions
2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1
Show 13 moreShow less
2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm6
2.9.3+dfsg1-1ubuntu0.7+esm7
libxml2
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+esm2, plus listed versions
2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1
Show 10 moreShow less
2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm1
2.9.4+dfsg1-6.1ubuntu1.9+esm2
libxml2
Ubuntu:20.04:LTS
From an advisory covering 5 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.9, plus listed versions
2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3
Show 11 moreShow less
2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.8
2.9.10+dfsg-5ubuntu0.20.04.9
libxml2
Ubuntu:22.04:LTS
From an advisory covering 5 CVEs
 before 2.9.13+dfsg-1ubuntu0.6, plus listed versions
2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1
Show 5 moreShow less
2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.5
2.9.13+dfsg-1ubuntu0.6
libxml2
Ubuntu:24.04:LTS
From an advisory covering 5 CVEs
 before 2.9.14+dfsg-1.3ubuntu3.2, plus listed versions
2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu12.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.1
2.9.14+dfsg-1.3ubuntu3.2
libxml2
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 2.13.6-1.1
2.13.6-1.1
python-lxml
openSUSE:Tumbleweed
 before 5.3.2-1.1
5.3.2-1.1

History

History
RecordedChangedSources
affected
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-24928 is a high vulnerability (CVSS 7.8) in Gnome Libxml2, published February 18, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. Fixed in libxml2 2.11.8-r1.

References

Show 94 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 2 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open