USN-7215-1
libxml2 vulnerability
No scoreFix available
Xisco Fauli discovered that libxml2 incorrectly handled custom SAX handlers. A remote attacker could possibly use this issue to perform XML External Entity (XXE) attacks.
What each source reports
OSV No score
libxml2 vulnerability
Xisco Fauli discovered that libxml2 incorrectly handled custom SAX handlers. A remote attacker could possibly use this issue to perform XML External Entity (XXE) attacks.
- Record
USN-7215-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libxml2Ubuntu:24.10 |
before 2.12.7+dfsg-3ubuntu0.1, plus listed versions 2.9.14+dfsg-1.3ubuntu32.12.7+dfsg-3 |
2.12.7+dfsg-3ubuntu0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-7215-1 is a vulnerability with no CVSS score yet in libxml2, published January 16, 2025. No source lists public exploit code. Fixed in libxml2 2.12.7+dfsg-3ubuntu0.1.