CVE-2025-32415
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has...
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
2.9
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
CVE-2025-32415- CVSS 3.1
- 2.9 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-1284
- Updated
- 2026-11-02
EUVDEUVD-2025-11554
2.9
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
EUVD-2025-11554- CVSS 3.1
- 2.9 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w8fw-fj9q-vcjj
2.9
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has...
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
GHSA-w8fw-fj9q-vcjj- CVSS 3.1
- 2.9 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-125, CWE-1284
- Updated
- 2026-11-02
NVD
2.9
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
CVE-2025-32415- CVSS 3.1
- 2.9 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1284, CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-32415
7.5
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
ALPINE-CVE-2025-32415- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-60863
7.5
CVE-2025-32415 affecting package libxml2 for versions less than 2.10.4-7
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
AZL-60863- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 46 moreShow less
OSVAZL-60886
7.5
CVE-2025-32415 affecting package libxml2 for versions less than 2.11.5-5
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
AZL-60886- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-05
OSVBELL-CVE-2025-32415
7.5
- Record
BELL-CVE-2025-32415- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
2.9
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
CVE-2025-32415- CVSS 3.1
- 2.9 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-1284
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-32415
7.5
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
DEBIAN-CVE-2025-32415- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVJLSEC-2025-90
7.5
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a...
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
JLSEC-2025-90- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2025-1455
2.9
libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
Security Fix(es):
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2025-32415)
- Record
OESA-2025-1455- CVSS 3.1
- 2.9 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2025-1456
2.9
libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
Security Fix(es):
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2025-32415)
- Record
OESA-2025-1456- CVSS 3.1
- 2.9 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2025-1457
2.9
libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
Security Fix(es):
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2025-32415)
- Record
OESA-2025-1457- CVSS 3.1
- 2.9 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2025-1458
5.6
libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
Security Fix(es):
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.(CVE-2025-32414)
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2025-32415)
- Record
OESA-2025-1458- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVOESA-2025-1459
5.6
libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.
Security Fix(es):
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.(CVE-2025-32414)
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2025-32415)
- Record
OESA-2025-1459- CVSS 3.1
- 5.6 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2025:13203
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13203- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13428
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13428- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13429
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13429- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13677
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13677- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13683
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13683- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13684
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13684- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13688
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13688- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13689
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13689- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13788
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13788- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13789
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13789- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:13806
7.5
Red Hat Security Advisory: libxml2 security update
- Record
RHSA-2025:13806- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:7519
9.1
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:7519- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2025:13203
7.5
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:13203- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2025:13428
7.5
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
-
libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
-
libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:13428- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2025:13429
7.5
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
-
libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
-
libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:13429- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-32415
2.9
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
UBUNTU-CVE-2025-32415- CVSS 3.1
- 2.9 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2025:13203 No score
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:13203- Updated
- 2026-11-02
OSVALSA-2025:13428 No score
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
- libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:13428- Updated
- 2026-11-02
OSVALSA-2025:13429 No score
Moderate: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
The libxml2 library is a development toolbox providing the implementation of various XML standards.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
- libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
- libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables (CVE-2025-32415)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:13429- Updated
- 2026-11-02
OSVBIT-java-2025-32415 No score
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
BIT-java-2025-32415- Updated
- 2026-11-02
OSVBIT-java-min-2025-32415 No score
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
BIT-java-min-2025-32415- Updated
- 2026-11-02
OSVBIT-jre-2025-32415 No score
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
- Record
BIT-jre-2025-32415- Updated
- 2026-11-02
OSVCLSA-2025-1746653948 No score
Fix CVE(s): CVE-2025-32414, CVE-2025-32415
- SECURITY UPDATE: OOB access in python API
- debian/patches/CVE-2025-32414-pre1.patch: fix SAX driver with character streams in python/drv_libxml2.py.
- debian/patches/CVE-2025-32414-1.patch: read at most len/4 characters in python/libxml.c.
- debian/patches/CVE-2025-32414-2.patch: add a test in python/tests/Makefile.am, python/tests/unicode.py.
- CVE-2025-32414
- SECURITY UPDATE: heap under-read in xmlSchemaIDCFillNodeTables
- debian/patches/CVE-2025-32415.patch: fix heap buffer overflow in xmlSchemaIDCFillNodeTables in xmlschemas.c.
- CVE-2025-32415
- Record
CLSA-2025-1746653948- Updated
- 2026-11-02
OSVCLSA-2025-1746654421 No score
libxml2: Fix of CVE-2025-32415
- CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables
- Record
CLSA-2025-1746654421- Updated
- 2026-11-02
OSVCLSA-2025-1746791922 No score
libxml2: Fix of 2 CVEs
- CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables function
- CVE-2025-32414: fix out-of-bounds memory access in Python API by correcting return value in xmlPythonFileRead and xmlPythonFileReadRaw.
- Record
CLSA-2025-1746791922- Updated
- 2026-11-02
OSVCLSA-2025-1746792339 No score
libxml2: Fix of 2 CVEs
- CVE-2025-32415: fix heap-based buffer under-read in xmlSchemaIDCFillNodeTables function
- CVE-2025-32414: fix out-of-bounds memory access in Python API by correcting return value in xmlPythonFileRead and xmlPythonFileReadRaw.
- Record
CLSA-2025-1746792339- Updated
- 2026-11-02
OSVCLSA-2025-1747057793 No score
libxml2: Fix of CVE-2025-32415
- CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables
- Record
CLSA-2025-1747057793- Updated
- 2026-11-02
OSVCLSA-2025-1747058033 No score
libxml2: Fix of CVE-2025-32415
- CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables
- Record
CLSA-2025-1747058033- Updated
- 2026-11-02
OSVCLSA-2025-1747058711 No score
libxml2: Fix of CVE-2025-32415
- CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables
- Record
CLSA-2025-1747058711- Updated
- 2026-11-02
OSVCLSA-2025-1747058736 No score
libxml2: Fix of CVE-2025-32415
- CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables
- Record
CLSA-2025-1747058736- Updated
- 2026-11-02
OSVCLSA-2025-1747689263 No score
Fix CVE(s): CVE-2025-32414, CVE-2025-32415
- SECURITY UPDATE: Out-of-bounds memory access in Python API bindings
- debian/patches/CVE-2025-32414.patch: Limit character reads and reserve buffer space for UTF-8 encoding to prevent overflow
- CVE-2025-32414
- SECURITY UPDATE: Heap buffer under-read in XML schema validation
- debian/patches/CVE-2025-32415.patch: Fix heap buffer overflow in xmlSchemaIDCFillNodeTables
- CVE-2025-32415
- Record
CLSA-2025-1747689263- Updated
- 2026-11-02
OSVCLSA-2025-1748282288 No score
Fix CVE(s): CVE-2025-32414, CVE-2025-32415
- SECURITY UPDATE: Out-of-bounds memory access in Python API bindings
- debian/patches/CVE-2025-32414.patch: Limit character reads and reserve buffer space for UTF-8 encoding to prevent overflow
- CVE-2025-32414
- SECURITY UPDATE: Heap buffer under-read in XML schema validation
- debian/patches/CVE-2025-32415.patch: Fix heap buffer overflow in xmlSchemaIDCFillNodeTables
- CVE-2025-32415
- Record
CLSA-2025-1748282288- Updated
- 2026-11-02
OSVCLSA-2025-1748282366 No score
libxml2: Fix of CVE-2025-32415
- CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables
- Record
CLSA-2025-1748282366- Updated
- 2026-11-02
OSVMGASA-2025-0139 No score
Updated libxml2 packages fix security vulnerabilities
[CVE-2025-32414] Buffer overflow when parsing text streams with Python API [CVE-2025-32415] Heap-based Buffer Overflow in xmlSchemaIDCFillNodeTables
- Record
MGASA-2025-0139- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15019-1 No score
libxml2-2-2.13.8-1.1 on GA media
These are all security issues fixed in the libxml2-2-2.13.8-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15019-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:1435-1 No score
Security update for libxml2
This update for libxml2 fixes the following issues:
- CVE-2025-32414: Fixed an out-of-bounds read when parsing text via the Python API. (bsc#1241551)
- CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read. (bsc#1241453)
- Record
SUSE-SU-2025:1435-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libxml2Alpine:v3.18 |
2.14.0 up to 2.11.8-r3 | 2.11.8-r3 |
libxml2Alpine:v3.19 |
2.14.0 up to 2.11.8-r3 | 2.11.8-r3 |
libxml2Alpine:v3.20 |
2.14.0 up to 2.12.10-r0 | 2.12.10-r0 |
libxml2Alpine:v3.21 |
2.14.0 up to 2.13.4-r6 | 2.13.4-r6 |
libxml2Alpine:v3.22 |
2.14.0 up to 2.13.8-r0 | 2.13.8-r0 |
libxml2Alpine:v3.23 |
2.14.0 up to 2.13.8-r0 | 2.13.8-r0 |
libxml2Alpine:v3.24 |
2.14.0 up to 2.13.8-r0 | 2.13.8-r0 |
libxml2AlmaLinux:8 |
before 2.9.7-21.el8_10.3 | 2.9.7-21.el8_10.3 |
libxml2-develAlmaLinux:8 |
before 2.9.7-21.el8_10.3 | 2.9.7-21.el8_10.3 |
python3-libxml2AlmaLinux:8 |
before 2.9.7-21.el8_10.3 | 2.9.7-21.el8_10.3 |
Show 247 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libxml2AlmaLinux:9 From an advisory covering 2 CVEs |
before 2.9.13-12.el9_6 | 2.9.13-12.el9_6 |
libxml2-develAlmaLinux:9 From an advisory covering 2 CVEs |
before 2.9.13-12.el9_6 | 2.9.13-12.el9_6 |
python3-libxml2AlmaLinux:9 From an advisory covering 2 CVEs |
before 2.9.13-12.el9_6 | 2.9.13-12.el9_6 |
libxml2AlmaLinux:10 From an advisory covering 2 CVEs |
before 2.12.5-9.el10_0 | 2.12.5-9.el10_0 |
libxml2-develAlmaLinux:10 From an advisory covering 2 CVEs |
before 2.12.5-9.el10_0 | 2.12.5-9.el10_0 |
libxml2-staticAlmaLinux:10 From an advisory covering 2 CVEs |
before 2.12.5-9.el10_0 | 2.12.5-9.el10_0 |
python3-libxml2AlmaLinux:10 From an advisory covering 2 CVEs |
before 2.12.5-9.el10_0 | 2.12.5-9.el10_0 |
libxml2Azure Linux:2 |
before 2.10.4-7 | 2.10.4-7 |
libxml2Azure Linux:3 |
before 2.11.5-5 | 2.11.5-5 |
libxml2Alpaquita:23 |
2.10.3-r2 up to 2.10.4-r4 | 2.10.4-r4 |
libxml2Alpaquita:stream |
2.10.3-r2 up to 2.13.8-r0 | 2.13.8-r0 |
libxml2BellSoft Hardened Containers:23 |
2.10.3-r2 up to 2.10.4-r4 | 2.10.4-r4 |
libxml2BellSoft Hardened Containers:stream |
2.10.3-r2 up to 2.13.8-r0 | 2.13.8-r0 |
javaBitnami |
before 1.8.0, 1.9.0 up to 8.0.461 | 1.8.08.0.461 |
java-minBitnami |
before 1.8.0, 1.9.0 up to 8.0.461 | 1.8.08.0.461 |
jreBitnami |
before 1.8.0, 1.9.0 up to 8.0.461 | 1.8.08.0.461 |
libxml2TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 | 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 |
libxml2-devTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 | 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 |
libxml2-docTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 | 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 |
libxml2-utilsTuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 | 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 |
python-libxml2TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 | 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 |
python3-libxml2TuxCare:Ubuntu:20.04 From an advisory covering 2 CVEs |
before 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 | 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els1 |
libxml2TuxCare:CentOS-Stream:8 |
before 2.9.7-18.el8.tuxcare.els6 | 2.9.7-18.el8.tuxcare.els6 |
libxml2-develTuxCare:CentOS-Stream:8 |
before 2.9.7-18.el8.tuxcare.els6 | 2.9.7-18.el8.tuxcare.els6 |
libxml2-staticTuxCare:CentOS-Stream:8 |
before 2.9.7-18.el8.tuxcare.els6 | 2.9.7-18.el8.tuxcare.els6 |
python3-libxml2TuxCare:CentOS-Stream:8 |
before 2.9.7-18.el8.tuxcare.els6 | 2.9.7-18.el8.tuxcare.els6 |
libxml2TuxCare:CentOS:8.4 From an advisory covering 2 CVEs |
before 2.9.7-9.el8_4.2.tuxcare.els10 | 2.9.7-9.el8_4.2.tuxcare.els10 |
libxml2-develTuxCare:CentOS:8.4 From an advisory covering 2 CVEs |
before 2.9.7-9.el8_4.2.tuxcare.els10 | 2.9.7-9.el8_4.2.tuxcare.els10 |
libxml2-staticTuxCare:CentOS:8.4 From an advisory covering 2 CVEs |
before 2.9.7-9.el8_4.2.tuxcare.els10 | 2.9.7-9.el8_4.2.tuxcare.els10 |
python3-libxml2TuxCare:CentOS:8.4 From an advisory covering 2 CVEs |
before 2.9.7-9.el8_4.2.tuxcare.els10 | 2.9.7-9.el8_4.2.tuxcare.els10 |
libxml2TuxCare:CentOS:8.5 From an advisory covering 2 CVEs |
before 2.9.7-9.el8_4.2.tuxcare.els10 | 2.9.7-9.el8_4.2.tuxcare.els10 |
libxml2-develTuxCare:CentOS:8.5 From an advisory covering 2 CVEs |
before 2.9.7-9.el8_4.2.tuxcare.els10 | 2.9.7-9.el8_4.2.tuxcare.els10 |
libxml2-staticTuxCare:CentOS:8.5 From an advisory covering 2 CVEs |
before 2.9.7-9.el8_4.2.tuxcare.els10 | 2.9.7-9.el8_4.2.tuxcare.els10 |
python3-libxml2TuxCare:CentOS:8.5 From an advisory covering 2 CVEs |
before 2.9.7-9.el8_4.2.tuxcare.els10 | 2.9.7-9.el8_4.2.tuxcare.els10 |
libxml2TuxCare:CentOS:6 |
before 2.7.6-21.el6_8.1.tuxcare.els8 | 2.7.6-21.el6_8.1.tuxcare.els8 |
libxml2-develTuxCare:CentOS:6 |
before 2.7.6-21.el6_8.1.tuxcare.els8 | 2.7.6-21.el6_8.1.tuxcare.els8 |
libxml2-pythonTuxCare:CentOS:6 |
before 2.7.6-21.el6_8.1.tuxcare.els8 | 2.7.6-21.el6_8.1.tuxcare.els8 |
libxml2-staticTuxCare:CentOS:6 |
before 2.7.6-21.el6_8.1.tuxcare.els8 | 2.7.6-21.el6_8.1.tuxcare.els8 |
libxml2TuxCare:CentOS:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2-develTuxCare:CentOS:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2-pythonTuxCare:CentOS:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2-staticTuxCare:CentOS:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2TuxCare:OracleLinux:6 |
before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els8 | 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els8 |
libxml2-develTuxCare:OracleLinux:6 |
before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els8 | 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els8 |
libxml2-pythonTuxCare:OracleLinux:6 |
before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els8 | 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els8 |
libxml2-staticTuxCare:OracleLinux:6 |
before 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els8 | 2.7.6-21.0.1.el6_8.1.tuxcare.ol.els8 |
libxml2TuxCare:OracleLinux:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2-develTuxCare:OracleLinux:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2-pythonTuxCare:OracleLinux:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2-staticTuxCare:OracleLinux:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2TuxCare:Ubuntu:18.04 From an advisory covering 2 CVEs |
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 | 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 |
libxml2-devTuxCare:Ubuntu:18.04 From an advisory covering 2 CVEs |
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 | 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 |
libxml2-docTuxCare:Ubuntu:18.04 From an advisory covering 2 CVEs |
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 | 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 |
libxml2-utilsTuxCare:Ubuntu:18.04 From an advisory covering 2 CVEs |
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 | 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 |
python-libxml2TuxCare:Ubuntu:18.04 From an advisory covering 2 CVEs |
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 | 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 |
python3-libxml2TuxCare:Ubuntu:18.04 From an advisory covering 2 CVEs |
before 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 | 2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els3 |
libxml2TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 |
libxml2-devTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 |
libxml2-docTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 |
libxml2-utilsTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 |
python-libxml2TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 | 2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 |
libxml2TuxCare:RHEL:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2-develTuxCare:RHEL:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2-pythonTuxCare:RHEL:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2-staticTuxCare:RHEL:7 |
before 2.9.1-6.0.3.el7_9.6.tuxcare.els4 | 2.9.1-6.0.3.el7_9.6.tuxcare.els4 |
libxml2Debian:12 |
before 2.9.14+dfsg-1.3~deb12u2, plus listed versions 2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1 |
2.9.14+dfsg-1.3~deb12u2 |
libxml2Debian:13 |
before 2.12.7+dfsg+really2.9.14-1 | 2.12.7+dfsg+really2.9.14-1 |
libxml2Debian:14 |
before 2.12.7+dfsg+really2.9.14-1 | 2.12.7+dfsg+really2.9.14-1 |
libxml2Debian:11 From an advisory covering 2 CVEs |
before 2.9.10+dfsg-6.7+deb11u7, plus listed versions 2.9.10+dfsg-6.72.9.10+dfsg-6.7+deb11u12.9.10+dfsg-6.7+deb11u22.9.10+dfsg-6.7+deb11u32.9.10+dfsg-6.7+deb11u42.9.10+dfsg-6.7+deb11u52.9.10+dfsg-6.7+deb11u6 |
2.9.10+dfsg-6.7+deb11u7 |
libxml2Debian:12 From an advisory covering 10 CVEs |
before 2.9.14+dfsg-1.3~deb12u2, plus listed versions 2.9.14+dfsg-1.22.9.14+dfsg-1.3~deb12u1 |
2.9.14+dfsg-1.3~deb12u2 |
XML2_jllJulia |
before 2.13.8+0, 2.14.1+0 up to 2.14.4+0 | 2.13.8+02.14.4+0 |
libxml2Mageia:9 From an advisory covering 2 CVEs |
before 2.10.4-1.7.mga9 | 2.10.4-1.7.mga9 |
libxml2openEuler:20.03-LTS-SP4 |
before 2.9.10-44.oe2003sp4 | 2.9.10-44.oe2003sp4 |
libxml2openEuler:22.03-LTS-SP3 |
before 2.9.14-16.oe2203sp3 | 2.9.14-16.oe2203sp3 |
libxml2openEuler:22.03-LTS-SP4 |
before 2.9.14-16.oe2203sp4 | 2.9.14-16.oe2203sp4 |
libxml2openEuler:24.03-LTS From an advisory covering 2 CVEs |
before 2.11.5-6.oe2403 | 2.11.5-6.oe2403 |
libxml2openEuler:24.03-LTS-SP1 From an advisory covering 2 CVEs |
before 2.11.9-3.oe2403sp1 | 2.11.9-3.oe2403sp1 |
libxml2-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
libxml2-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
libxml2-develRed Hat:enterprise_linux:8::appstream |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
python3-libxml2-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
libxml2Red Hat:enterprise_linux:8::baseos |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
libxml2-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
libxml2-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
python3-libxml2Red Hat:enterprise_linux:8::baseos |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
python3-libxml2-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
libxml2-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
libxml2-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
libxml2-develRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
python3-libxml2-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
libxml2Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
libxml2-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
libxml2-debugsourceRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
python3-libxml2Red Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
python3-libxml2-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
libxml2-debuginfoRed Hat:enterprise_linux:10.0 From an advisory covering 2 CVEs |
before 0:2.12.5-9.el10_0 | 0:2.12.5-9.el10_0 |
libxml2-debugsourceRed Hat:enterprise_linux:10.0 From an advisory covering 2 CVEs |
before 0:2.12.5-9.el10_0 | 0:2.12.5-9.el10_0 |
libxml2-develRed Hat:enterprise_linux:10.0 From an advisory covering 2 CVEs |
before 0:2.12.5-9.el10_0 | 0:2.12.5-9.el10_0 |
python3-libxml2-debuginfoRed Hat:enterprise_linux:10.0 From an advisory covering 2 CVEs |
before 0:2.12.5-9.el10_0 | 0:2.12.5-9.el10_0 |
libxml2Red Hat:enterprise_linux:10.0 From an advisory covering 2 CVEs |
before 0:2.12.5-9.el10_0 | 0:2.12.5-9.el10_0 |
python3-libxml2Red Hat:enterprise_linux:10.0 From an advisory covering 2 CVEs |
before 0:2.12.5-9.el10_0 | 0:2.12.5-9.el10_0 |
libxml2-staticRed Hat:enterprise_linux:10.0 From an advisory covering 2 CVEs |
before 0:2.12.5-9.el10_0 | 0:2.12.5-9.el10_0 |
libxml2-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_4 | 0:2.9.13-12.el9_4 |
libxml2-debugsourceRed Hat:rhel_eus:9.4::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_4 | 0:2.9.13-12.el9_4 |
libxml2-develRed Hat:rhel_eus:9.4::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_4 | 0:2.9.13-12.el9_4 |
python3-libxml2-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_4 | 0:2.9.13-12.el9_4 |
libxml2Red Hat:rhel_eus:9.4::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_4 | 0:2.9.13-12.el9_4 |
libxml2-debuginfoRed Hat:rhel_eus:9.4::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_4 | 0:2.9.13-12.el9_4 |
libxml2-debugsourceRed Hat:rhel_eus:9.4::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_4 | 0:2.9.13-12.el9_4 |
python3-libxml2Red Hat:rhel_eus:9.4::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_4 | 0:2.9.13-12.el9_4 |
python3-libxml2-debuginfoRed Hat:rhel_eus:9.4::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_4 | 0:2.9.13-12.el9_4 |
libxml2-debuginfoRed Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-3.el9_2.9 | 0:2.9.13-3.el9_2.9 |
libxml2-debugsourceRed Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-3.el9_2.9 | 0:2.9.13-3.el9_2.9 |
libxml2-develRed Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-3.el9_2.9 | 0:2.9.13-3.el9_2.9 |
python3-libxml2-debuginfoRed Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-3.el9_2.9 | 0:2.9.13-3.el9_2.9 |
libxml2Red Hat:rhel_e4s:9.2::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-3.el9_2.9 | 0:2.9.13-3.el9_2.9 |
libxml2-debuginfoRed Hat:rhel_e4s:9.2::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-3.el9_2.9 | 0:2.9.13-3.el9_2.9 |
libxml2-debugsourceRed Hat:rhel_e4s:9.2::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-3.el9_2.9 | 0:2.9.13-3.el9_2.9 |
python3-libxml2Red Hat:rhel_e4s:9.2::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-3.el9_2.9 | 0:2.9.13-3.el9_2.9 |
python3-libxml2-debuginfoRed Hat:rhel_e4s:9.2::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-3.el9_2.9 | 0:2.9.13-3.el9_2.9 |
libxml2-debuginfoRed Hat:rhel_e4s:9.0::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-1.el9_0.7 | 0:2.9.13-1.el9_0.7 |
libxml2-debugsourceRed Hat:rhel_e4s:9.0::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-1.el9_0.7 | 0:2.9.13-1.el9_0.7 |
libxml2-develRed Hat:rhel_e4s:9.0::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-1.el9_0.7 | 0:2.9.13-1.el9_0.7 |
python3-libxml2-debuginfoRed Hat:rhel_e4s:9.0::appstream From an advisory covering 2 CVEs |
before 0:2.9.13-1.el9_0.7 | 0:2.9.13-1.el9_0.7 |
libxml2Red Hat:rhel_e4s:9.0::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-1.el9_0.7 | 0:2.9.13-1.el9_0.7 |
libxml2-debuginfoRed Hat:rhel_e4s:9.0::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-1.el9_0.7 | 0:2.9.13-1.el9_0.7 |
libxml2-debugsourceRed Hat:rhel_e4s:9.0::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-1.el9_0.7 | 0:2.9.13-1.el9_0.7 |
python3-libxml2Red Hat:rhel_e4s:9.0::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-1.el9_0.7 | 0:2.9.13-1.el9_0.7 |
python3-libxml2-debuginfoRed Hat:rhel_e4s:9.0::baseos From an advisory covering 2 CVEs |
before 0:2.9.13-1.el9_0.7 | 0:2.9.13-1.el9_0.7 |
libxml2-debuginfoRed Hat:rhel_aus:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debugsourceRed Hat:rhel_aus:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-develRed Hat:rhel_aus:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
python3-libxml2-debuginfoRed Hat:rhel_aus:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debuginfoRed Hat:rhel_e4s:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debugsourceRed Hat:rhel_e4s:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-develRed Hat:rhel_e4s:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
python3-libxml2-debuginfoRed Hat:rhel_e4s:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debuginfoRed Hat:rhel_tus:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debugsourceRed Hat:rhel_tus:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-develRed Hat:rhel_tus:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
python3-libxml2-debuginfoRed Hat:rhel_tus:8.6::appstream |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2Red Hat:rhel_aus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debuginfoRed Hat:rhel_aus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debugsourceRed Hat:rhel_aus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
python3-libxml2Red Hat:rhel_aus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
python3-libxml2-debuginfoRed Hat:rhel_aus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2Red Hat:rhel_e4s:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debuginfoRed Hat:rhel_e4s:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debugsourceRed Hat:rhel_e4s:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
python3-libxml2Red Hat:rhel_e4s:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
python3-libxml2-debuginfoRed Hat:rhel_e4s:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2Red Hat:rhel_tus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debuginfoRed Hat:rhel_tus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debugsourceRed Hat:rhel_tus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
python3-libxml2Red Hat:rhel_tus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
python3-libxml2-debuginfoRed Hat:rhel_tus:8.6::baseos |
before 0:2.9.7-13.el8_6.12 | 0:2.9.7-13.el8_6.12 |
libxml2-debuginfoRed Hat:rhel_aus:8.2::appstream |
before 0:2.9.7-9.el8_2.5 | 0:2.9.7-9.el8_2.5 |
libxml2-debugsourceRed Hat:rhel_aus:8.2::appstream |
before 0:2.9.7-9.el8_2.5 | 0:2.9.7-9.el8_2.5 |
libxml2-develRed Hat:rhel_aus:8.2::appstream |
before 0:2.9.7-9.el8_2.5 | 0:2.9.7-9.el8_2.5 |
python3-libxml2-debuginfoRed Hat:rhel_aus:8.2::appstream |
before 0:2.9.7-9.el8_2.5 | 0:2.9.7-9.el8_2.5 |
libxml2Red Hat:rhel_aus:8.2::baseos |
before 0:2.9.7-9.el8_2.5 | 0:2.9.7-9.el8_2.5 |
libxml2-debuginfoRed Hat:rhel_aus:8.2::baseos |
before 0:2.9.7-9.el8_2.5 | 0:2.9.7-9.el8_2.5 |
libxml2-debugsourceRed Hat:rhel_aus:8.2::baseos |
before 0:2.9.7-9.el8_2.5 | 0:2.9.7-9.el8_2.5 |
python3-libxml2Red Hat:rhel_aus:8.2::baseos |
before 0:2.9.7-9.el8_2.5 | 0:2.9.7-9.el8_2.5 |
python3-libxml2-debuginfoRed Hat:rhel_aus:8.2::baseos |
before 0:2.9.7-9.el8_2.5 | 0:2.9.7-9.el8_2.5 |
libxml2-debuginfoRed Hat:rhel_aus:8.4::appstream |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2-debugsourceRed Hat:rhel_aus:8.4::appstream |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2-develRed Hat:rhel_aus:8.4::appstream |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
python3-libxml2-debuginfoRed Hat:rhel_aus:8.4::appstream |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2-debuginfoRed Hat:rhel_eus_long_life:8.4::appstream |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2-debugsourceRed Hat:rhel_eus_long_life:8.4::appstream |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2-develRed Hat:rhel_eus_long_life:8.4::appstream |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
python3-libxml2-debuginfoRed Hat:rhel_eus_long_life:8.4::appstream |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2Red Hat:rhel_aus:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2-debuginfoRed Hat:rhel_aus:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2-debugsourceRed Hat:rhel_aus:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
python3-libxml2Red Hat:rhel_aus:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
python3-libxml2-debuginfoRed Hat:rhel_aus:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2Red Hat:rhel_eus_long_life:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2-debuginfoRed Hat:rhel_eus_long_life:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2-debugsourceRed Hat:rhel_eus_long_life:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
python3-libxml2Red Hat:rhel_eus_long_life:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
python3-libxml2-debuginfoRed Hat:rhel_eus_long_life:8.4::baseos |
before 0:2.9.7-9.el8_4.8 | 0:2.9.7-9.el8_4.8 |
libxml2Red Hat:rhel_els:7 |
before 0:2.9.1-6.el7_9.13 | 0:2.9.1-6.el7_9.13 |
libxml2-debuginfoRed Hat:rhel_els:7 |
before 0:2.9.1-6.el7_9.13 | 0:2.9.1-6.el7_9.13 |
libxml2-develRed Hat:rhel_els:7 |
before 0:2.9.1-6.el7_9.13 | 0:2.9.1-6.el7_9.13 |
libxml2-pythonRed Hat:rhel_els:7 |
before 0:2.9.1-6.el7_9.13 | 0:2.9.1-6.el7_9.13 |
libxml2-staticRed Hat:rhel_els:7 |
before 0:2.9.1-6.el7_9.13 | 0:2.9.1-6.el7_9.13 |
libxml2-debuginfoRed Hat:rhel_e4s:8.8::appstream |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2-debugsourceRed Hat:rhel_e4s:8.8::appstream |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2-develRed Hat:rhel_e4s:8.8::appstream |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
python3-libxml2-debuginfoRed Hat:rhel_e4s:8.8::appstream |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2-debuginfoRed Hat:rhel_tus:8.8::appstream |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2-debugsourceRed Hat:rhel_tus:8.8::appstream |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2-develRed Hat:rhel_tus:8.8::appstream |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
python3-libxml2-debuginfoRed Hat:rhel_tus:8.8::appstream |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2Red Hat:rhel_e4s:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2-debuginfoRed Hat:rhel_e4s:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2-debugsourceRed Hat:rhel_e4s:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
python3-libxml2Red Hat:rhel_e4s:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
python3-libxml2-debuginfoRed Hat:rhel_e4s:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2Red Hat:rhel_tus:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2-debuginfoRed Hat:rhel_tus:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2-debugsourceRed Hat:rhel_tus:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
python3-libxml2Red Hat:rhel_tus:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
python3-libxml2-debuginfoRed Hat:rhel_tus:8.8::baseos |
before 0:2.9.7-16.el8_8.12 | 0:2.9.7-16.el8_8.12 |
libxml2Red Hat:hummingbird:1 From an advisory covering 13 CVEs |
before 0:2.15.2-0.3.hum1 | 0:2.15.2-0.3.hum1 |
libxml2-16Red Hat:hummingbird:1 From an advisory covering 13 CVEs |
before 0:2.15.2-0.3.hum1 | 0:2.15.2-0.3.hum1 |
libxml2-develRed Hat:hummingbird:1 From an advisory covering 13 CVEs |
before 0:2.15.2-0.3.hum1 | 0:2.15.2-0.3.hum1 |
libxml2-staticRed Hat:hummingbird:1 From an advisory covering 13 CVEs |
before 0:2.15.2-0.3.hum1 | 0:2.15.2-0.3.hum1 |
python3-libxml2Red Hat:hummingbird:1 From an advisory covering 13 CVEs |
before 0:2.15.2-0.3.hum1 | 0:2.15.2-0.3.hum1 |
libxml2Rocky Linux:8 |
before 0:2.9.7-21.el8_10.3 | 0:2.9.7-21.el8_10.3 |
libxml2Rocky Linux:9 From an advisory covering 2 CVEs |
before 0:2.9.13-12.el9_6 | 0:2.9.13-12.el9_6 |
libxml2Rocky Linux:10 From an advisory covering 2 CVEs |
before 0:2.12.5-9.el10_0 | 0:2.12.5-9.el10_0 |
libxml2SUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 2.9.14-150400.5.41.1 | 2.9.14-150400.5.41.1 |
libxml2-pythonSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 2.9.14-150400.5.41.1 | 2.9.14-150400.5.41.1 |
libxml2SUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 2.9.14-150400.5.41.1 | 2.9.14-150400.5.41.1 |
libxml2-pythonSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 2.9.14-150400.5.41.1 | 2.9.14-150400.5.41.1 |
libxml2SUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 2.10.3-150500.5.26.1 | 2.10.3-150500.5.26.1 |
libxml2-pythonSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 2.10.3-150500.5.26.1 | 2.10.3-150500.5.26.1 |
libxml2SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 2 CVEs |
before 2.10.3-150500.5.26.1 | 2.10.3-150500.5.26.1 |
libxml2-pythonSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 2 CVEs |
before 2.10.3-150500.5.26.1 | 2.10.3-150500.5.26.1 |
libxml2-pythonSUSE:Linux Enterprise Module for Python 3 15 SP6 From an advisory covering 2 CVEs |
before 2.10.3-150500.5.26.1 | 2.10.3-150500.5.26.1 |
libxml2openSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 2.10.3-150500.5.26.1 | 2.10.3-150500.5.26.1 |
libxml2-pythonopenSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 2.10.3-150500.5.26.1 | 2.10.3-150500.5.26.1 |
libxml2SUSE:Linux Enterprise Micro 5.1 From an advisory covering 2 CVEs |
before 2.9.7-150000.3.79.1 | 2.9.7-150000.3.79.1 |
libxml2SUSE:Linux Enterprise Micro 5.2 From an advisory covering 2 CVEs |
before 2.9.7-150000.3.79.1 | 2.9.7-150000.3.79.1 |
python-libxml2-pythonSUSE:Linux Enterprise Micro 5.2 From an advisory covering 2 CVEs |
before 2.9.7-150000.3.79.1 | 2.9.7-150000.3.79.1 |
python-libxml2-pythonopenSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 2.9.7-150000.3.79.1 | 2.9.7-150000.3.79.1 |
libxml2SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 2.9.4-46.84.1 | 2.9.4-46.84.1 |
python-libxml2SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 2.9.4-46.84.1 | 2.9.4-46.84.1 |
libxml2SUSE:Linux Micro 6.0 From an advisory covering 2 CVEs |
before 2.11.6-8.1 | 2.11.6-8.1 |
libxml2SUSE:Linux Micro 6.1 From an advisory covering 2 CVEs |
before 2.11.6-slfo.1.1_3.1 | 2.11.6-slfo.1.1_3.1 |
libxml2Ubuntu:Pro:14.04:LTS |
before 2.9.1+dfsg1-3ubuntu4.13+esm10, plus listed versions 2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2 Show 20 moreShow less2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm62.9.1+dfsg1-3ubuntu4.13+esm72.9.1+dfsg1-3ubuntu4.13+esm82.9.1+dfsg1-3ubuntu4.13+esm9 |
2.9.1+dfsg1-3ubuntu4.13+esm10 |
libxml2Ubuntu:Pro:16.04:LTS |
before 2.9.3+dfsg1-1ubuntu0.7+esm8, plus listed versions 2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1 Show 14 moreShow less2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm62.9.3+dfsg1-1ubuntu0.7+esm7 |
2.9.3+dfsg1-1ubuntu0.7+esm8 |
libxml2Ubuntu:Pro:18.04:LTS |
before 2.9.4+dfsg1-6.1ubuntu1.9+esm3, plus listed versions 2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1 Show 11 moreShow less2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm12.9.4+dfsg1-6.1ubuntu1.9+esm2 |
2.9.4+dfsg1-6.1ubuntu1.9+esm3 |
libxml2Ubuntu:20.04:LTS |
before 2.9.10+dfsg-5ubuntu0.20.04.10, plus listed versions 2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3 Show 12 moreShow less2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.82.9.10+dfsg-5ubuntu0.20.04.9 |
2.9.10+dfsg-5ubuntu0.20.04.10 |
libxml2Ubuntu:22.04:LTS |
before 2.9.13+dfsg-1ubuntu0.7, plus listed versions 2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1 Show 6 moreShow less2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.52.9.13+dfsg-1ubuntu0.6 |
2.9.13+dfsg-1ubuntu0.7 |
libxml2Ubuntu:24.04:LTS |
before 2.9.14+dfsg-1.3ubuntu3.3, plus listed versions 2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu1 Show 4 moreShow less2.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.12.9.14+dfsg-1.3ubuntu3.2 |
2.9.14+dfsg-1.3ubuntu3.3 |
libxml2Ubuntu:25.10 |
before 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1, plus listed versions 2.12.7+dfsg+really2.9.14-0.4 |
2.12.7+dfsg+really2.9.14-0.4ubuntu0.1 |
libxml2Ubuntu:20.04:LTS From an advisory covering 2 CVEs |
before 2.9.10+dfsg-5ubuntu0.20.04.10, plus listed versions 2.9.4+dfsg1-7ubuntu32.9.4+dfsg1-7ubuntu52.9.4+dfsg1-8ubuntu12.9.4+dfsg1-8ubuntu22.9.4+dfsg1-8ubuntu3 Show 12 moreShow less2.9.10+dfsg-1ubuntu32.9.10+dfsg-4build12.9.10+dfsg-52.9.10+dfsg-5ubuntu0.20.04.12.9.10+dfsg-5ubuntu0.20.04.22.9.10+dfsg-5ubuntu0.20.04.32.9.10+dfsg-5ubuntu0.20.04.42.9.10+dfsg-5ubuntu0.20.04.52.9.10+dfsg-5ubuntu0.20.04.62.9.10+dfsg-5ubuntu0.20.04.72.9.10+dfsg-5ubuntu0.20.04.82.9.10+dfsg-5ubuntu0.20.04.9 |
2.9.10+dfsg-5ubuntu0.20.04.10 |
libxml2Ubuntu:22.04:LTS From an advisory covering 2 CVEs |
before 2.9.13+dfsg-1ubuntu0.7, plus listed versions 2.9.12+dfsg-42.9.12+dfsg-52.9.12+dfsg-62.9.13+dfsg-12.9.13+dfsg-1build1 Show 6 moreShow less2.9.13+dfsg-1ubuntu0.12.9.13+dfsg-1ubuntu0.22.9.13+dfsg-1ubuntu0.32.9.13+dfsg-1ubuntu0.42.9.13+dfsg-1ubuntu0.52.9.13+dfsg-1ubuntu0.6 |
2.9.13+dfsg-1ubuntu0.7 |
libxml2Ubuntu:24.04:LTS From an advisory covering 2 CVEs |
before 2.9.14+dfsg-1.3ubuntu3.3, plus listed versions 2.9.14+dfsg-1.32.9.14+dfsg-1.3build12.9.14+dfsg-1.3build22.9.14+dfsg-1.3build32.9.14+dfsg-1.3ubuntu1 Show 4 moreShow less2.9.14+dfsg-1.3ubuntu22.9.14+dfsg-1.3ubuntu32.9.14+dfsg-1.3ubuntu3.12.9.14+dfsg-1.3ubuntu3.2 |
2.9.14+dfsg-1.3ubuntu3.3 |
libxml2Ubuntu:Pro:16.04:LTS From an advisory covering 2 CVEs |
before 2.9.3+dfsg1-1ubuntu0.7+esm8, plus listed versions 2.9.2+zdfsg1-42.9.2+zdfsg1-4ubuntu12.9.2+zdfsg1-4ubuntu22.9.2+zdfsg1-4ubuntu32.9.3+dfsg1-1 Show 14 moreShow less2.9.3+dfsg1-1ubuntu0.12.9.3+dfsg1-1ubuntu0.22.9.3+dfsg1-1ubuntu0.32.9.3+dfsg1-1ubuntu0.42.9.3+dfsg1-1ubuntu0.52.9.3+dfsg1-1ubuntu0.62.9.3+dfsg1-1ubuntu0.72.9.3+dfsg1-1ubuntu0.7+esm12.9.3+dfsg1-1ubuntu0.7+esm22.9.3+dfsg1-1ubuntu0.7+esm32.9.3+dfsg1-1ubuntu0.7+esm42.9.3+dfsg1-1ubuntu0.7+esm52.9.3+dfsg1-1ubuntu0.7+esm62.9.3+dfsg1-1ubuntu0.7+esm7 |
2.9.3+dfsg1-1ubuntu0.7+esm8 |
libxml2Ubuntu:Pro:18.04:LTS From an advisory covering 2 CVEs |
before 2.9.4+dfsg1-6.1ubuntu1.9+esm3, plus listed versions 2.9.4+dfsg1-4ubuntu12.9.4+dfsg1-5ubuntu12.9.4+dfsg1-5ubuntu22.9.4+dfsg1-5.1ubuntu12.9.4+dfsg1-5.2ubuntu1 Show 11 moreShow less2.9.4+dfsg1-6.1ubuntu12.9.4+dfsg1-6.1ubuntu1.22.9.4+dfsg1-6.1ubuntu1.32.9.4+dfsg1-6.1ubuntu1.42.9.4+dfsg1-6.1ubuntu1.52.9.4+dfsg1-6.1ubuntu1.62.9.4+dfsg1-6.1ubuntu1.72.9.4+dfsg1-6.1ubuntu1.82.9.4+dfsg1-6.1ubuntu1.92.9.4+dfsg1-6.1ubuntu1.9+esm12.9.4+dfsg1-6.1ubuntu1.9+esm2 |
2.9.4+dfsg1-6.1ubuntu1.9+esm3 |
libxml2Ubuntu:Pro:14.04:LTS From an advisory covering 3 CVEs |
before 2.9.1+dfsg1-3ubuntu4.13+esm10, plus listed versions 2.9.1+dfsg1-3ubuntu22.9.1+dfsg1-3ubuntu32.9.1+dfsg1-3ubuntu42.9.1+dfsg1-3ubuntu4.12.9.1+dfsg1-3ubuntu4.2 Show 20 moreShow less2.9.1+dfsg1-3ubuntu4.32.9.1+dfsg1-3ubuntu4.42.9.1+dfsg1-3ubuntu4.52.9.1+dfsg1-3ubuntu4.62.9.1+dfsg1-3ubuntu4.72.9.1+dfsg1-3ubuntu4.82.9.1+dfsg1-3ubuntu4.92.9.1+dfsg1-3ubuntu4.102.9.1+dfsg1-3ubuntu4.112.9.1+dfsg1-3ubuntu4.122.9.1+dfsg1-3ubuntu4.132.9.1+dfsg1-3ubuntu4.13+esm12.9.1+dfsg1-3ubuntu4.13+esm22.9.1+dfsg1-3ubuntu4.13+esm32.9.1+dfsg1-3ubuntu4.13+esm42.9.1+dfsg1-3ubuntu4.13+esm52.9.1+dfsg1-3ubuntu4.13+esm62.9.1+dfsg1-3ubuntu4.13+esm72.9.1+dfsg1-3ubuntu4.13+esm82.9.1+dfsg1-3ubuntu4.13+esm9 |
2.9.1+dfsg1-3ubuntu4.13+esm10 |
libxml2openSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 2.13.8-1.1 | 2.13.8-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-32415 is a low vulnerability (CVSS 2.9) in Gnome Libxml2, published April 17, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. Fixed in libxml2 2.11.8-r3.
References
gitlab.gnome.org/GNOME/libxml2/-/issues/890
lists.debian.org/debian-lts-announce/2025/04/msg00041.html
nvd.nist.gov/vuln/detail/CVE-2025-32415
github.com/advisories/GHSA-w8fw-fj9q-vcjj
security.alpinelinux.org/vuln/CVE-2025-32415
access.redhat.com/errata/RHSA-2025:13203
Show 138 moreShow less
access.redhat.com/security/cve/CVE-2025-32415
bugzilla.redhat.com/2360768
errata.almalinux.org/8/ALSA-2025-13203.html
access.redhat.com/errata/RHSA-2025:13428
access.redhat.com/security/cve/CVE-2025-32414
bugzilla.redhat.com/2358121
errata.almalinux.org/9/ALSA-2025-13428.html
access.redhat.com/errata/RHSA-2025:13429
errata.almalinux.org/10/ALSA-2025-13429.html
docs.bell-sw.com/security/cves/CVE-2025-32415
errata.tuxcare.com/ubuntu20.04-els/CLSA-2025-1746653948.html
errata.tuxcare.com/centos8stream-els/CLSA-2025-1746654421.html
errata.cloudlinux.com/centos8.4-els/CLSA-2025-1746791922.html
errata.cloudlinux.com/centos8.5-els/CLSA-2025-1746792339.html
errata.cloudlinux.com/els6/CLSA-2025-1747057793.html
errata.tuxcare.com/centos7-els/CLSA-2025-1747058033.html
errata.cloudlinux.com/ol6/CLSA-2025-1747058711.html
errata.tuxcare.com/oraclelinux7-els/CLSA-2025-1747058736.html
errata.cloudlinux.com/ubuntu18-els/CLSA-2025-1747689263.html
errata.cloudlinux.com/ubuntu16-els/CLSA-2025-1748282288.html
errata.tuxcare.com/rhel7-els/CLSA-2025-1748282366.html
github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32415.json
security-tracker.debian.org/tracker/CVE-2025-32415
advisories.mageia.org/MGASA-2025-0139.html
bugs.mageia.org/show_bug.cgi?id=34210
openwall.com/lists/oss-security/2025/04/17/3
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1455
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1456
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1457
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1458
nvd.nist.gov/vuln/detail/CVE-2025-32414
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1459
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2360768
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13203.json
cve.org/CVERecord?id=CVE-2025-32415
bugzilla.redhat.com/show_bug.cgi?id=2358121
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13428.json
cve.org/CVERecord?id=CVE-2025-32414
gitlab.gnome.org/GNOME/libxml2/-/issues/889
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13429.json
access.redhat.com/errata/RHSA-2025:13677
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13677.json
access.redhat.com/errata/RHSA-2025:13683
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13683.json
access.redhat.com/errata/RHSA-2025:13684
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13684.json
access.redhat.com/errata/RHSA-2025:13688
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13688.json
access.redhat.com/errata/RHSA-2025:13689
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13689.json
access.redhat.com/errata/RHSA-2025:13788
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13788.json
access.redhat.com/errata/RHSA-2025:13789
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13789.json
access.redhat.com/errata/RHSA-2025:13806
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13806.json
access.redhat.com/errata/RHSA-2026:7519
images.redhat.com
access.redhat.com/security/cve/CVE-2025-6170
access.redhat.com/security/cve/CVE-2025-6021
access.redhat.com/security/cve/CVE-2025-49796
access.redhat.com/security/cve/CVE-2025-49795
access.redhat.com/security/cve/CVE-2025-49794
access.redhat.com/security/cve/CVE-2025-9714
access.redhat.com/security/cve/CVE-2025-26434
access.redhat.com/security/cve/CVE-2026-0992
access.redhat.com/security/cve/CVE-2026-0990
access.redhat.com/security/cve/CVE-2026-0989
access.redhat.com/security/cve/CVE-2026-1757
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7519.json
bugzilla.redhat.com/show_bug.cgi?id=2372406
cve.org/CVERecord?id=CVE-2025-6021
nvd.nist.gov/vuln/detail/CVE-2025-6021
gitlab.gnome.org/GNOME/libxml2/-/issues/926
bugzilla.redhat.com/show_bug.cgi?id=2372952
cve.org/CVERecord?id=CVE-2025-6170
nvd.nist.gov/vuln/detail/CVE-2025-6170
gitlab.gnome.org/GNOME/libxml2/-/issues/941
bugzilla.redhat.com/show_bug.cgi?id=2392605
cve.org/CVERecord?id=CVE-2025-9714
nvd.nist.gov/vuln/detail/CVE-2025-9714
gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21
gitlab.gnome.org/GNOME/libxslt/-/issues/148
bugzilla.redhat.com/show_bug.cgi?id=2393475
cve.org/CVERecord?id=CVE-2025-26434
nvd.nist.gov/vuln/detail/CVE-2025-26434
gitlab.gnome.org/GNOME/libxml2/-/commit/5e7874015ef5ed8b2705eb2f7b0960f56f7760ea
security-tracker.debian.org/tracker/CVE-2025-26434
source.android.com/security/bulletin/android-16
bugzilla.redhat.com/show_bug.cgi?id=2372373
cve.org/CVERecord?id=CVE-2025-49794
nvd.nist.gov/vuln/detail/CVE-2025-49794
gitlab.gnome.org/GNOME/libxml2/-/issues/931
bugzilla.redhat.com/show_bug.cgi?id=2372379
cve.org/CVERecord?id=CVE-2025-49795
nvd.nist.gov/vuln/detail/CVE-2025-49795
gitlab.gnome.org/GNOME/libxml2/-/issues/932
bugzilla.redhat.com/show_bug.cgi?id=2372385
cve.org/CVERecord?id=CVE-2025-49796
nvd.nist.gov/vuln/detail/CVE-2025-49796
gitlab.gnome.org/GNOME/libxml2/-/issues/933
bugzilla.redhat.com/show_bug.cgi?id=2429933
cve.org/CVERecord?id=CVE-2026-0989
nvd.nist.gov/vuln/detail/CVE-2026-0989
gitlab.gnome.org/GNOME/libxml2/-/issues/998
bugzilla.redhat.com/show_bug.cgi?id=2429959
cve.org/CVERecord?id=CVE-2026-0990
nvd.nist.gov/vuln/detail/CVE-2026-0990
gitlab.gnome.org/GNOME/libxml2/-/issues/1018
bugzilla.redhat.com/show_bug.cgi?id=2429975
cve.org/CVERecord?id=CVE-2026-0992
nvd.nist.gov/vuln/detail/CVE-2026-0992
gitlab.gnome.org/GNOME/libxml2/-/issues/1019
bugzilla.redhat.com/show_bug.cgi?id=2435940
cve.org/CVERecord?id=CVE-2026-1757
nvd.nist.gov/vuln/detail/CVE-2026-1757
gitlab.gnome.org/GNOME/libxml2/-/issues/1009
errata.rockylinux.org/RLSA-2025:13203
errata.rockylinux.org/RLSA-2025:13428
errata.rockylinux.org/RLSA-2025:13429
suse.com/support/update/announcement/2025/suse-su-20251435-1
bugzilla.suse.com/1241453
bugzilla.suse.com/1241551
suse.com/security/cve/CVE-2025-32414
suse.com/security/cve/CVE-2025-32415
suse.com/support/update/announcement/2025/suse-su-20251438-1
suse.com/support/update/announcement/2025/suse-su-20251439-1
suse.com/support/update/announcement/2025/suse-su-20251440-1
suse.com/support/update/announcement/2025/suse-su-202520333-1
suse.com/support/update/announcement/2025/suse-su-202520364-1
ubuntu.com/security/CVE-2025-32415
ubuntu.com/security/notices/USN-7467-1
ubuntu.com/security/notices/USN-7467-2
ubuntu.com/security/notices/USN-7896-1
ubuntu.com/security/CVE-2025-32414
ubuntu.com/security/CVE-2025-7425
lists.opensuse.org/archives/list/[email protected]/thread/HN7F2PARWMCPSROOCFF3CWKQYVSIH4RA
Left out on purpose, here and in the API, to keep responses small: 8 source records.