Every CVE Search/ Get API key

CVE-2025-32414

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the...

5.6 MediumFix available

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.38%Up 0.4 points since Apr 8, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.6

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
CVE-2025-32414
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-393
Updated
2026-11-02
EUVDEUVD-2025-10440 5.6

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
EUVD-2025-10440
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-mfrm-w63c-3x58 5.6

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the...

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
GHSA-mfrm-w63c-3x58
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-252, CWE-393
Updated
2026-11-02
NVD 5.6

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
CVE-2025-32414
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-393, CWE-252
Updated
2026-11-02
OSVALPINE-CVE-2025-32414 7.5

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
ALPINE-CVE-2025-32414
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-59722 7.5

CVE-2025-32414 affecting package libxml2 for versions less than 2.10.4-7

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
AZL-59722
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 46 moreShow less
OSVAZL-59740 7.5

CVE-2025-32414 affecting package libxml2 for versions less than 2.11.5-5

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
AZL-59740
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVBELL-CVE-2025-32414 7.5
Record
BELL-CVE-2025-32414
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.6

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
CVE-2025-32414
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-393
Updated
2026-11-02
OSVDEBIAN-CVE-2025-32414 7.5

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
DEBIAN-CVE-2025-32414
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2025-89 7.5

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the...

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
JLSEC-2025-89
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1458 5.6

libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.

Security Fix(es):

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.(CVE-2025-32414)

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2025-32415)

Record
OESA-2025-1458
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2025-1459 5.6

libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.

Security Fix(es):

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.(CVE-2025-32414)

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2025-32415)

Record
OESA-2025-1459
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2025-1536 7.5

libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.

Security Fix(es):

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.(CVE-2025-32414)

Record
OESA-2025-1536
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1537 7.5

libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.

Security Fix(es):

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.(CVE-2025-32414)

Record
OESA-2025-1537
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1538 7.5

libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.

Security Fix(es):

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.(CVE-2025-32414)

Record
OESA-2025-1538
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:12098 9.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:12098
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:12237 9.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:12237
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:12239 9.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:12239
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:12240 9.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:12240
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:12241 9.1

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:12241
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:13428 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:13428
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:13429 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:13429
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:13677 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:13677
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:13683 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:13683
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:13684 7.5

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:13684
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:8958 5.6

Red Hat Security Advisory: libxml2 security update

Record
RHSA-2025:8958
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:7519 9.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7519
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:13428 7.5

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)

  • libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:13428
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:13429 7.5

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)

  • libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:13429
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:8958 5.6

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:8958
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2025-32414 5.6

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
UBUNTU-CVE-2025-32414
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2025:13428 No score

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
  • libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:13428
Updated
2026-11-02
OSVALSA-2025:13429 No score

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

The libxml2 library is a development toolbox providing the implementation of various XML standards.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
  • libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:13429
Updated
2026-11-02
OSVALSA-2025:8958 No score

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:8958
Updated
2026-11-02
OSVBIT-java-2025-32414 No score

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
BIT-java-2025-32414
Updated
2026-11-02
OSVBIT-java-min-2025-32414 No score

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
BIT-java-min-2025-32414
Updated
2026-11-02
OSVBIT-jre-2025-32414 No score

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.

Record
BIT-jre-2025-32414
Updated
2026-11-02
OSVCLSA-2025-1746653948 No score

Fix CVE(s): CVE-2025-32414, CVE-2025-32415

  • SECURITY UPDATE: OOB access in python API
    • debian/patches/CVE-2025-32414-pre1.patch: fix SAX driver with character streams in python/drv_libxml2.py.
    • debian/patches/CVE-2025-32414-1.patch: read at most len/4 characters in python/libxml.c.
    • debian/patches/CVE-2025-32414-2.patch: add a test in python/tests/Makefile.am, python/tests/unicode.py.
    • CVE-2025-32414
  • SECURITY UPDATE: heap under-read in xmlSchemaIDCFillNodeTables
    • debian/patches/CVE-2025-32415.patch: fix heap buffer overflow in xmlSchemaIDCFillNodeTables in xmlschemas.c.
    • CVE-2025-32415
Record
CLSA-2025-1746653948
Updated
2026-11-02
OSVCLSA-2025-1746791922 No score

libxml2: Fix of 2 CVEs

  • CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables function
  • CVE-2025-32414: fix out-of-bounds memory access in Python API by correcting return value in xmlPythonFileRead and xmlPythonFileReadRaw.
Record
CLSA-2025-1746791922
Updated
2026-11-02
OSVCLSA-2025-1746792339 No score

libxml2: Fix of 2 CVEs

  • CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables function
  • CVE-2025-32414: fix out-of-bounds memory access in Python API by correcting return value in xmlPythonFileRead and xmlPythonFileReadRaw.
Record
CLSA-2025-1746792339
Updated
2026-11-02
OSVCLSA-2025-1747689263 No score

Fix CVE(s): CVE-2025-32414, CVE-2025-32415

  • SECURITY UPDATE: Out-of-bounds memory access in Python API bindings
    • debian/patches/CVE-2025-32414.patch: Limit character reads and reserve buffer space for UTF-8 encoding to prevent overflow
    • CVE-2025-32414
  • SECURITY UPDATE: Heap buffer under-read in XML schema validation
    • debian/patches/CVE-2025-32415.patch: Fix heap buffer overflow in xmlSchemaIDCFillNodeTables
    • CVE-2025-32415
Record
CLSA-2025-1747689263
Updated
2026-11-02
OSVCLSA-2025-1748282288 No score

Fix CVE(s): CVE-2025-32414, CVE-2025-32415

  • SECURITY UPDATE: Out-of-bounds memory access in Python API bindings
    • debian/patches/CVE-2025-32414.patch: Limit character reads and reserve buffer space for UTF-8 encoding to prevent overflow
    • CVE-2025-32414
  • SECURITY UPDATE: Heap buffer under-read in XML schema validation
    • debian/patches/CVE-2025-32415.patch: Fix heap buffer overflow in xmlSchemaIDCFillNodeTables
    • CVE-2025-32415
Record
CLSA-2025-1748282288
Updated
2026-11-02
OSVCLSA-2025-1751889153 No score

libxml2: Fix of CVE-2025-32414

  • CVE-2025-32414: fix out-of-bounds memory access in Python API
Record
CLSA-2025-1751889153
Updated
2026-11-02
OSVMGASA-2025-0139 No score

Updated libxml2 packages fix security vulnerabilities

[CVE-2025-32414] Buffer overflow when parsing text streams with Python API [CVE-2025-32415] Heap-based Buffer Overflow in xmlSchemaIDCFillNodeTables

Record
MGASA-2025-0139
Updated
2026-11-02
OSVopenSUSE-SU-2025:15019-1 No score

libxml2-2-2.13.8-1.1 on GA media

These are all security issues fixed in the libxml2-2-2.13.8-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15019-1
Updated
2026-11-02
OSVSUSE-SU-2025:1435-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2025-32414: Fixed an out-of-bounds read when parsing text via the Python API. (bsc#1241551)
  • CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read. (bsc#1241453)
Record
SUSE-SU-2025:1435-1
Updated
2026-11-02
OSVSUSE-SU-2025:1438-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2025-32414: Fixed an out-of-bounds read when parsing text via the Python API. (bsc#1241551)
  • CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read. (bsc#1241453)
Record
SUSE-SU-2025:1438-1
Updated
2026-11-02
OSVSUSE-SU-2025:1439-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2025-32414: Fixed an out-of-bounds read when parsing text via the Python API. (bsc#1241551)
  • CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read. (bsc#1241453)
Record
SUSE-SU-2025:1439-1
Updated
2026-11-02
OSVSUSE-SU-2025:1440-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2025-32414: Fixed an out-of-bounds read when parsing text via the Python API. (bsc#1241551)
  • CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read. (bsc#1241453)
Record
SUSE-SU-2025:1440-1
Updated
2026-11-02
OSVSUSE-SU-2025:20333-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2025-32414: Fixed out-of-bounds read when parsing text via the Python API (bsc#1241551)
  • CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read (bsc#1241453)
Record
SUSE-SU-2025:20333-1
Updated
2026-11-02
OSVSUSE-SU-2025:20364-1 No score

Security update for libxml2

This update for libxml2 fixes the following issues:

  • CVE-2025-32414: Fixed out-of-bounds read when parsing text via the Python API (bsc#1241551).
  • CVE-2025-32415: Fixed heap-based buffer under-read via crafted XML documents (bsc#1241453).
Record
SUSE-SU-2025:20364-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libxml2
Alpine:v3.18
 2.14.0 up to 2.11.8-r3
2.11.8-r3
libxml2
Alpine:v3.19
 2.14.0 up to 2.11.8-r3
2.11.8-r3
libxml2
Alpine:v3.20
 2.14.0 up to 2.12.10-r0
2.12.10-r0
libxml2
Alpine:v3.21
 2.14.0 up to 2.13.4-r6
2.13.4-r6
libxml2
Alpine:v3.22
 2.14.0 up to 2.13.8-r0
2.13.8-r0
libxml2
Alpine:v3.23
 2.14.0 up to 2.13.8-r0
2.13.8-r0
libxml2
Alpine:v3.24
 2.14.0 up to 2.13.8-r0
2.13.8-r0
libxml2
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.13-12.el9_6
2.9.13-12.el9_6
libxml2-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.13-12.el9_6
2.9.13-12.el9_6
python3-libxml2
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2.9.13-12.el9_6
2.9.13-12.el9_6
Show 227 moreShow less
Affected packages
PackageAffectedFixed
libxml2
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.5-9.el10_0
2.12.5-9.el10_0
libxml2-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.5-9.el10_0
2.12.5-9.el10_0
libxml2-static
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.5-9.el10_0
2.12.5-9.el10_0
python3-libxml2
AlmaLinux:10
From an advisory covering 2 CVEs
 before 2.12.5-9.el10_0
2.12.5-9.el10_0
libxml2
AlmaLinux:8
 before 2.9.7-20.el8_10
2.9.7-20.el8_10
libxml2-devel
AlmaLinux:8
 before 2.9.7-20.el8_10
2.9.7-20.el8_10
python3-libxml2
AlmaLinux:8
 before 2.9.7-20.el8_10
2.9.7-20.el8_10
libxml2
Azure Linux:2
 before 2.10.4-7
2.10.4-7
libxml2
Azure Linux:3
 before 2.11.5-5
2.11.5-5
libxml2
Alpaquita:23
 2.10.3-r2 up to 2.10.4-r4
2.10.4-r4
libxml2
Alpaquita:stream
 2.10.3-r2 up to 2.13.8-r0
2.13.8-r0
libxml2
BellSoft Hardened Containers:23
 2.10.3-r2 up to 2.10.4-r4
2.10.4-r4
libxml2
BellSoft Hardened Containers:stream
 2.10.3-r2 up to 2.13.8-r0
2.13.8-r0
java
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
java-min
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
jre
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
libxml2
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
libxml2-dev
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
libxml2-doc
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
libxml2-utils
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
python-libxml2
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
python3-libxml2
TuxCare:Ubuntu:20.04
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1
libxml2
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els10
2.9.7-9.el8_4.2.tuxcare.els10
libxml2-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els10
2.9.7-9.el8_4.2.tuxcare.els10
libxml2-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els10
2.9.7-9.el8_4.2.tuxcare.els10
python3-libxml2
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els10
2.9.7-9.el8_4.2.tuxcare.els10
libxml2
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els10
2.9.7-9.el8_4.2.tuxcare.els10
libxml2-devel
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els10
2.9.7-9.el8_4.2.tuxcare.els10
libxml2-static
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els10
2.9.7-9.el8_4.2.tuxcare.els10
python3-libxml2
TuxCare:CentOS:8.5
From an advisory covering 2 CVEs
 before 2.9.7-9.el8_4.2.tuxcare.els10
2.9.7-9.el8_4.2.tuxcare.els10
libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
libxml2-dev
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
libxml2-doc
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
libxml2-utils
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
python-libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
python3-libxml2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3
libxml2
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
libxml2-dev
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
libxml2-doc
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
libxml2-utils
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
python-libxml2
TuxCare:Ubuntu:16.04
From an advisory covering 2 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9
libxml2
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els7
2.9.13-3.el9_2.1.tuxcare.els7
libxml2-devel
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els7
2.9.13-3.el9_2.1.tuxcare.els7
libxml2-static
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els7
2.9.13-3.el9_2.1.tuxcare.els7
python3-libxml2
TuxCare:AlmaLinux:9.2
 before 2.9.13-3.el9_2.1.tuxcare.els7
2.9.13-3.el9_2.1.tuxcare.els7
libxml2
Debian:12
 before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
libxml2
Debian:13
 before 2.12.7+dfsg+really2.9.14-1
2.12.7+dfsg+really2.9.14-1
libxml2
Debian:14
 before 2.12.7+dfsg+really2.9.14-1
2.12.7+dfsg+really2.9.14-1
libxml2
Debian:11
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-6.7+deb11u7, plus listed versions
2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u12.9.10+dfsg-6.7+deb11u22.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u42.9.10+dfsg-6.7+deb11u52.9.10+dfsg-6.7+deb11u6
2.9.10+dfsg-6.7+deb11u7
libxml2
Debian:12
From an advisory covering 10 CVEs
 before 2.9.14+dfsg-1.3~deb12u2, plus listed versions
2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1
2.9.14+dfsg-1.3~deb12u2
XML2_jll
Julia
 before 2.13.8+0, 2.14.1+0 up to 2.14.4+0
2.13.8+02.14.4+0
libxml2
Mageia:9
From an advisory covering 2 CVEs
 before 2.10.4-1.7.mga9
2.10.4-1.7.mga9
libxml2
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 2.11.5-6.oe2403
2.11.5-6.oe2403
libxml2
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 2.11.9-3.oe2403sp1
2.11.9-3.oe2403sp1
libxml2
openEuler:22.03-LTS-SP3
 before 2.9.14-17.oe2203sp3
2.9.14-17.oe2203sp3
libxml2
openEuler:22.03-LTS-SP4
 before 2.9.14-17.oe2203sp4
2.9.14-17.oe2203sp4
libxml2
openEuler:20.03-LTS-SP4
 before 2.9.10-45.oe2003sp4
2.9.10-45.oe2003sp4
libxml2-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-devel
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-devel
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-devel
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debugsource
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
python3-libxml2
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debuginfo
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debugsource
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
python3-libxml2
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debuginfo
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debugsource
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
python3-libxml2
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-13.el8_6.10
0:2.9.7-13.el8_6.10
libxml2-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_2.3
0:2.9.7-9.el8_2.3
libxml2-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_2.3
0:2.9.7-9.el8_2.3
libxml2-devel
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_2.3
0:2.9.7-9.el8_2.3
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_2.3
0:2.9.7-9.el8_2.3
libxml2
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_2.3
0:2.9.7-9.el8_2.3
libxml2-debuginfo
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_2.3
0:2.9.7-9.el8_2.3
libxml2-debugsource
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_2.3
0:2.9.7-9.el8_2.3
python3-libxml2
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_2.3
0:2.9.7-9.el8_2.3
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_2.3
0:2.9.7-9.el8_2.3
libxml2-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2-debugsource
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2-devel
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2-debuginfo
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2-debugsource
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2-devel
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.8::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2-debugsource
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
python3-libxml2
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
python3-libxml2-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2-debuginfo
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2-debugsource
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
python3-libxml2
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
python3-libxml2-debuginfo
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-16.el8_8.9
0:2.9.7-16.el8_8.9
libxml2
Red Hat:rhel_els:7
From an advisory covering 4 CVEs
 before 0:2.9.1-6.el7_9.10
0:2.9.1-6.el7_9.10
libxml2-debuginfo
Red Hat:rhel_els:7
From an advisory covering 4 CVEs
 before 0:2.9.1-6.el7_9.10
0:2.9.1-6.el7_9.10
libxml2-devel
Red Hat:rhel_els:7
From an advisory covering 4 CVEs
 before 0:2.9.1-6.el7_9.10
0:2.9.1-6.el7_9.10
libxml2-python
Red Hat:rhel_els:7
From an advisory covering 4 CVEs
 before 0:2.9.1-6.el7_9.10
0:2.9.1-6.el7_9.10
libxml2-static
Red Hat:rhel_els:7
From an advisory covering 4 CVEs
 before 0:2.9.1-6.el7_9.10
0:2.9.1-6.el7_9.10
libxml2-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-devel
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-devel
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
python3-libxml2-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-debugsource
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
python3-libxml2
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
python3-libxml2-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-debugsource
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
python3-libxml2
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
python3-libxml2-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
From an advisory covering 4 CVEs
 before 0:2.9.7-9.el8_4.6
0:2.9.7-9.el8_4.6
libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
libxml2-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
libxml2-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
libxml2
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
libxml2-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
python3-libxml2
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
python3-libxml2-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
libxml2-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:2.12.5-9.el10_0
0:2.12.5-9.el10_0
libxml2-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:2.12.5-9.el10_0
0:2.12.5-9.el10_0
libxml2-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:2.12.5-9.el10_0
0:2.12.5-9.el10_0
python3-libxml2-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:2.12.5-9.el10_0
0:2.12.5-9.el10_0
libxml2
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:2.12.5-9.el10_0
0:2.12.5-9.el10_0
python3-libxml2
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:2.12.5-9.el10_0
0:2.12.5-9.el10_0
libxml2-static
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:2.12.5-9.el10_0
0:2.12.5-9.el10_0
libxml2-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_4
0:2.9.13-12.el9_4
libxml2-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_4
0:2.9.13-12.el9_4
libxml2-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_4
0:2.9.13-12.el9_4
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_4
0:2.9.13-12.el9_4
libxml2
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_4
0:2.9.13-12.el9_4
libxml2-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_4
0:2.9.13-12.el9_4
libxml2-debugsource
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_4
0:2.9.13-12.el9_4
python3-libxml2
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_4
0:2.9.13-12.el9_4
python3-libxml2-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_4
0:2.9.13-12.el9_4
libxml2-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.9
0:2.9.13-3.el9_2.9
libxml2-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.9
0:2.9.13-3.el9_2.9
libxml2-devel
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.9
0:2.9.13-3.el9_2.9
python3-libxml2-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.9
0:2.9.13-3.el9_2.9
libxml2
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.9
0:2.9.13-3.el9_2.9
libxml2-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.9
0:2.9.13-3.el9_2.9
libxml2-debugsource
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.9
0:2.9.13-3.el9_2.9
python3-libxml2
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.9
0:2.9.13-3.el9_2.9
python3-libxml2-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-3.el9_2.9
0:2.9.13-3.el9_2.9
libxml2-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.7
0:2.9.13-1.el9_0.7
libxml2-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.7
0:2.9.13-1.el9_0.7
libxml2-devel
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.7
0:2.9.13-1.el9_0.7
python3-libxml2-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.7
0:2.9.13-1.el9_0.7
libxml2
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.7
0:2.9.13-1.el9_0.7
libxml2-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.7
0:2.9.13-1.el9_0.7
libxml2-debugsource
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.7
0:2.9.13-1.el9_0.7
python3-libxml2
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.7
0:2.9.13-1.el9_0.7
python3-libxml2-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 2 CVEs
 before 0:2.9.13-1.el9_0.7
0:2.9.13-1.el9_0.7
libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
libxml2-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
libxml2-devel
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
libxml2
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
libxml2-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
python3-libxml2
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
python3-libxml2-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
libxml2
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.15.2-0.3.hum1
0:2.15.2-0.3.hum1
libxml2-16
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.15.2-0.3.hum1
0:2.15.2-0.3.hum1
libxml2-devel
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.15.2-0.3.hum1
0:2.15.2-0.3.hum1
libxml2-static
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.15.2-0.3.hum1
0:2.15.2-0.3.hum1
python3-libxml2
Red Hat:hummingbird:1
From an advisory covering 13 CVEs
 before 0:2.15.2-0.3.hum1
0:2.15.2-0.3.hum1
libxml2
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:2.9.13-12.el9_6
0:2.9.13-12.el9_6
libxml2
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:2.12.5-9.el10_0
0:2.12.5-9.el10_0
libxml2
Rocky Linux:8
 before 0:2.9.7-20.el8_10
0:2.9.7-20.el8_10
libxml2
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 2.9.14-150400.5.41.1
2.9.14-150400.5.41.1
libxml2-python
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 2.9.14-150400.5.41.1
2.9.14-150400.5.41.1
libxml2
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 2.9.14-150400.5.41.1
2.9.14-150400.5.41.1
libxml2-python
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 2.9.14-150400.5.41.1
2.9.14-150400.5.41.1
libxml2
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 2.10.3-150500.5.26.1
2.10.3-150500.5.26.1
libxml2-python
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 2.10.3-150500.5.26.1
2.10.3-150500.5.26.1
libxml2
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 2.10.3-150500.5.26.1
2.10.3-150500.5.26.1
libxml2-python
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 2.10.3-150500.5.26.1
2.10.3-150500.5.26.1
libxml2-python
SUSE:Linux Enterprise Module for Python 3 15 SP6
From an advisory covering 2 CVEs
 before 2.10.3-150500.5.26.1
2.10.3-150500.5.26.1
libxml2
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 2.10.3-150500.5.26.1
2.10.3-150500.5.26.1
libxml2-python
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 2.10.3-150500.5.26.1
2.10.3-150500.5.26.1
libxml2
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 2 CVEs
 before 2.9.7-150000.3.79.1
2.9.7-150000.3.79.1
libxml2
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 2.9.7-150000.3.79.1
2.9.7-150000.3.79.1
python-libxml2-python
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 2.9.7-150000.3.79.1
2.9.7-150000.3.79.1
python-libxml2-python
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 2.9.7-150000.3.79.1
2.9.7-150000.3.79.1
libxml2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 2 CVEs
 before 2.9.4-46.84.1
2.9.4-46.84.1
python-libxml2
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 2 CVEs
 before 2.9.4-46.84.1
2.9.4-46.84.1
libxml2
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 2.11.6-8.1
2.11.6-8.1
libxml2
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 2.11.6-slfo.1.1_3.1
2.11.6-slfo.1.1_3.1
libxml2
Ubuntu:Pro:14.04:LTS
 before 2.9.1+dfsg1-3ubuntu4.13+esm10, plus listed versions
2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2
Show 20 moreShow less
2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm62.9.1+dfsg1-3ubuntu4.13+esm72.9.1+dfsg1-3ubuntu4.13+esm82.9.1+dfsg1-3ubuntu4.13+esm9
2.9.1+dfsg1-3ubuntu4.13+esm10
libxml2
Ubuntu:Pro:16.04:LTS
 before 2.9.3+dfsg1-1ubuntu0.7+esm8, plus listed versions
2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1
Show 14 moreShow less
2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm62.9.3+dfsg1-1ubuntu0.7+esm7
2.9.3+dfsg1-1ubuntu0.7+esm8
libxml2
Ubuntu:Pro:18.04:LTS
 before 2.9.4+dfsg1-6.1ubuntu1.9+esm3, plus listed versions
2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1
Show 11 moreShow less
2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm12.9.4+dfsg1-6.1ubuntu1.9+esm2
2.9.4+dfsg1-6.1ubuntu1.9+esm3
libxml2
Ubuntu:20.04:LTS
 before 2.9.10+dfsg-5ubuntu0.20.04.10, plus listed versions
2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3
Show 12 moreShow less
2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.82.9.10+dfsg-5ubuntu0.20.04.9
2.9.10+dfsg-5ubuntu0.20.04.10
libxml2
Ubuntu:22.04:LTS
 before 2.9.13+dfsg-1ubuntu0.7, plus listed versions
2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1
Show 6 moreShow less
2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.52.9.13+dfsg-1ubuntu0.6
2.9.13+dfsg-1ubuntu0.7
libxml2
Ubuntu:24.04:LTS
 before 2.9.14+dfsg-1.3ubuntu3.3, plus listed versions
2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu1
Show 4 moreShow less
2.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.12.9.14+dfsg-1.3ubuntu3.2
2.9.14+dfsg-1.3ubuntu3.3
libxml2
Ubuntu:25.10
 before 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1, plus listed versions
2.12.7+dfsg+really2.9.14-0.4
2.12.7+dfsg+really2.9.14-0.4ubuntu0.1
libxml2
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2.9.10+dfsg-5ubuntu0.20.04.10, plus listed versions
2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3
Show 12 moreShow less
2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.82.9.10+dfsg-5ubuntu0.20.04.9
2.9.10+dfsg-5ubuntu0.20.04.10
libxml2
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 2.9.13+dfsg-1ubuntu0.7, plus listed versions
2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1
Show 6 moreShow less
2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.52.9.13+dfsg-1ubuntu0.6
2.9.13+dfsg-1ubuntu0.7
libxml2
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 2.9.14+dfsg-1.3ubuntu3.3, plus listed versions
2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu1
Show 4 moreShow less
2.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.12.9.14+dfsg-1.3ubuntu3.2
2.9.14+dfsg-1.3ubuntu3.3
libxml2
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 2.9.3+dfsg1-1ubuntu0.7+esm8, plus listed versions
2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1
Show 14 moreShow less
2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm62.9.3+dfsg1-1ubuntu0.7+esm7
2.9.3+dfsg1-1ubuntu0.7+esm8
libxml2
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 2.9.4+dfsg1-6.1ubuntu1.9+esm3, plus listed versions
2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1
Show 11 moreShow less
2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm12.9.4+dfsg1-6.1ubuntu1.9+esm2
2.9.4+dfsg1-6.1ubuntu1.9+esm3
libxml2
Ubuntu:Pro:14.04:LTS
From an advisory covering 3 CVEs
 before 2.9.1+dfsg1-3ubuntu4.13+esm10, plus listed versions
2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2
Show 20 moreShow less
2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm62.9.1+dfsg1-3ubuntu4.13+esm72.9.1+dfsg1-3ubuntu4.13+esm82.9.1+dfsg1-3ubuntu4.13+esm9
2.9.1+dfsg1-3ubuntu4.13+esm10
libxml2
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2.13.8-1.1
2.13.8-1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-32414 is a medium vulnerability (CVSS 5.6) in Gnome Libxml2, published April 8, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in libxml2 2.11.8-r3.

References

Show 133 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 3 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open