{"id":"CVE-2022-49043","aliases":["ALSA-2025:1350","ALSA-2025:1517","AZL-55967","CLSA-2025-1739961336","CLSA-2025-1741286239","CLSA-2025-1741286348","CLSA-2025-1742577756","CLSA-2025-1742578098","CLSA-2025-1742914538","CLSA-2025-1761139574","CLSA-2025-1761673925","CLSA-2026-1778491896","CLSA-2026-1778492595","CLSA-2026-1779215759","DEBIAN-CVE-2022-49043","DLA-4064-1","DSA-5949-1","EUVD-2022-53920","GHSA-84p5-cqqq-h4gr","JLSEC-2025-85","MGASA-2025-0034","OESA-2025-1104","RHSA-2025:1350","RHSA-2025:1516","RHSA-2025:1517","RHSA-2025:2507","RHSA-2025:2678","RLSA-2025:1517","SUSE-SU-2025:0300-1","SUSE-SU-2025:0303-1","SUSE-SU-2025:0341-1","SUSE-SU-2025:0348-1","UBUNTU-CVE-2022-49043","USN-7240-1","USN-7302-1"],"status":"published","title":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00265,"percentile":0.18498,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2025-01-26T00:00:00Z","modified":"2026-11-03T08:03:58Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libxml2","fixed_in":["2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libxml2-devel","fixed_in":["2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-libxml2","fixed_in":["2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libxml2","fixed_in":["2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libxml2-devel","fixed_in":["2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-libxml2","fixed_in":["2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libxml2","fixed_in":["2.10.4-5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-devel","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-static","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-devel","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-static","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2","fixed_in":["2.9.7-18.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-devel","fixed_in":["2.9.7-18.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-static","fixed_in":["2.9.7-18.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libxml2","fixed_in":["2.9.7-18.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2-devel","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2-python","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2-static","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-devel","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-python","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-static","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libxml2","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libxml2-devel","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libxml2-python","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libxml2-static","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2-devel","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2-python","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2-static","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-devel","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-python","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-static","fixed_in":["2.9.1-6.0.11.el7_9.6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-0.4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-0.4"],"sources":["osv"]},{"ecosystem":"Julia","package":"XML2_jll","fixed_in":["2.12.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libxml2","fixed_in":["2.10.4-1.5.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libxml2","fixed_in":["2.9.10-42.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","fixed_in":["0:2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-6.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-3.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-3.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2","fixed_in":["0:2.9.13-3.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-3.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-3.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libxml2","fixed_in":["0:2.9.7-18.el8_10.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libxml2","fixed_in":["2.9.4-46.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python-libxml2","fixed_in":["2.9.4-46.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxml2","fixed_in":["2.9.4-46.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-libxml2","fixed_in":["2.9.4-46.78.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxml2","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxml2","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.73.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2-python","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2-python","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2-python","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"libxml2","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libxml2","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libxml2-python","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"libxml2-python","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libxml2","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libxml2-python","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libxml2","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libxml2-python","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libxml2","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libxml2-python","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libxml2","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"libxml2","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"libxml2-python","fixed_in":["2.10.3-150500.5.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","fixed_in":["2.9.1+dfsg1-3ubuntu4.13+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","fixed_in":["2.9.13+dfsg-1ubuntu0.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-0.4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-0.4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.7+deb11u6"}]}],"versions":["2.9.10+dfsg-6.7","2.9.10+dfsg-6.7+deb11u1","2.9.10+dfsg-6.7+deb11u2","2.9.10+dfsg-6.7+deb11u3","2.9.10+dfsg-6.7+deb11u4","2.9.10+dfsg-6.7+deb11u5"],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"],"bundled":10},{"source":"osv","ecosystem":"Julia","package":"XML2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.12.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-1.5.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-42.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-9.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-9.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-9.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-9.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-9.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-9.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-9.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-9.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-9.el9_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.78.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.73.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.20.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm7"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4","2.9.1+dfsg1-3ubuntu4.13+esm5","2.9.1+dfsg1-3ubuntu4.13+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm7"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4","2.9.3+dfsg1-1ubuntu0.7+esm5","2.9.3+dfsg1-1ubuntu0.7+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+esm2"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8","2.9.4+dfsg1-6.1ubuntu1.9","2.9.4+dfsg1-6.1ubuntu1.9+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.8"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6","2.9.10+dfsg-5ubuntu0.20.04.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.5"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.1"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.8"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6","2.9.10+dfsg-5ubuntu0.20.04.7"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.5"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.1"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm7"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4","2.9.1+dfsg1-3ubuntu4.13+esm5","2.9.1+dfsg1-3ubuntu4.13+esm6"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm7"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4","2.9.3+dfsg1-1ubuntu0.7+esm5","2.9.3+dfsg1-1ubuntu0.7+esm6"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+esm2"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8","2.9.4+dfsg1-6.1ubuntu1.9","2.9.4+dfsg1-6.1ubuntu1.9+esm1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.9"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6","2.9.10+dfsg-5ubuntu0.20.04.7","2.9.10+dfsg-5ubuntu0.20.04.8"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.6"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4","2.9.13+dfsg-1ubuntu0.5"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.2"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3","2.9.14+dfsg-1.3ubuntu3.1"],"bundled":5}],"products":[{"vendor":"gnome","product":"libxml2"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/5a19e21605398cef6a8b1452477a8705cb41562b","tags":["Patch","fix","web","article"]},{"url":"https://github.com/php/php-src/issues/17467","tags":["Issue Tracking","report","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49043","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-84p5-cqqq-h4gr"},{"url":"https://access.redhat.com/errata/RHSA-2025:1350","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-49043","tags":["report"]},{"url":"https://bugzilla.redhat.com/2342118","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-1350.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1517","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-1517.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1739961336.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2025-1741286239.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2025-1741286348.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2025-1742577756.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2025-1742578098.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos8stream-els/CLSA-2025-1742914538.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1761139574.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1761673925.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1778491896.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1778492595.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1779215759.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49043.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-49043","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0034.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33975","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2025-January/020243.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1104","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342118","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1350.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-49043","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1516","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1516.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1517.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2507","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346421","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2507.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-56171","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56171","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/828","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24928","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24928","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/847","tags":["article"]},{"url":"https://issues.oss-fuzz.com/issues/392687022","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2678","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2678.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:1517","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250300-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236460","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-49043","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250303-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250341-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250348-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-49043","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7240-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7302-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-34459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-24928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27113","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-49043","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","status":"published","published":"2025-01-26T00:00:00Z","modified":"2025-11-03T20:35:14.313Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:34:23.8708Z"}],"euvd":[{"id":"EUVD-2022-53920","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","status":"published","published":"2025-01-26T00:00:00Z","modified":"2025-11-03T20:35:14Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:32.503916Z"}],"ghsa":[{"id":"GHSA-84p5-cqqq-h4gr","title":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","status":"published","published":"2025-01-26T06:30:48Z","modified":"2025-11-03T21:32:23Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:20.412437Z"}],"nvd":[{"id":"CVE-2022-49043","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","status":"published","published":"2025-01-26T06:15:21Z","modified":"2026-06-17T05:16:55.4Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:40.977475Z"}],"osv":[{"id":"CVE-2022-49043","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","status":"published","published":"2025-01-26T00:00:00Z","modified":"2026-10-28T10:31:17.136010532Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:44:28.090335Z"},{"id":"DEBIAN-CVE-2022-49043","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","status":"published","published":"2025-01-26T06:15:21Z","modified":"2026-11-03T08:03:58.919426304Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:34.488036Z"},{"id":"JLSEC-2025-85","title":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","status":"published","published":"2025-10-17T17:40:51.659Z","modified":"2026-07-18T00:01:25.069037652Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2025-1104","title":"libxml2 security update","description":"This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.\r\n\r\nSecurity Fix(es):\n\nxmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.(CVE-2022-49043)","status":"published","published":"2025-02-14T11:08:12Z","modified":"2026-08-18T01:18:46.256966681Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2025:1350","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-02-13T10:04:59Z","modified":"2026-10-14T10:07:24Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:1516","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-02-17T10:02:11Z","modified":"2026-10-14T10:07:47Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:1517","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-02-17T10:02:12Z","modified":"2026-10-14T10:07:47Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:2507","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-03-11T10:06:12Z","modified":"2026-10-14T10:09:34Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:2678","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-03-13T10:07:05Z","modified":"2026-10-14T10:09:40Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:1517","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-02-26T19:09:38.038344Z","modified":"2026-02-04T08:45:15.031924Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2022-49043","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","status":"published","published":"2025-01-26T06:15:00Z","modified":"2026-04-22T13:37:35.196817Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:58.967204Z"},{"id":"ALSA-2025:1350","title":"Important: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.  \n\nSecurity Fix(es):  \n\n  * libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-02-12T00:00:00Z","modified":"2026-10-29T11:32:27.591012979Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:1517","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.  \n\nSecurity Fix(es):  \n\n  * libxml: use-after-free in xmlXIncludeAddNode (CVE-2022-49043)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-02-17T00:00:00Z","modified":"2026-10-29T11:02:22.433893436Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-55967","title":"CVE-2022-49043 affecting package libxml2 for versions less than 2.10.4-5","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.","status":"published","published":"2025-01-26T06:15:21Z","modified":"2026-04-21T04:36:02.684994Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"CLSA-2025-1739961336","title":"libxml2: Fix of CVE-2022-49043","description":"- CVE-2022-49043: fix use-after-free vulnerability in xmlXIncludeAddNode","status":"published","published":"2025-02-19T10:35:42Z","modified":"2026-06-01T00:30:29.399734876Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1741286239","title":"Fix of 5 CVEs","description":"   * SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext\n     - debian/patches/CVE-2024-34459.patch: Fix buffer overread with `xmllint\n       --htmlout` by adding a missing bounds check\n     - CVE-2024-34459\n   * SECURITY UPDATE: use-after-free vulnerability in xinclude.c\n     - debian/patches/CVE-2022-49043.patch: Fix use-after-free in\n       xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free\n     - CVE-2022-49043\n   * SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in\n     valid.c\n     - debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in\n       xmlSnprintfElements caused by improperly calculating qname length\n     - CVE-2025-24928\n   * SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c\n     - debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child\n       axis to generate XML_OP_ELEM like the case without an axis\n     - CVE-2025-27113\n   * SECURITY UPDATE: use-after-free vulnerability in XML schema processing\n     - debian/patches/CVE-2024-56171.patch: Fix use-after-free after\n       xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and\n       xmlSchemaBubbleIDCNodeTables\n     - CVE-2024-56171","status":"published","published":"2025-03-06T18:37:24Z","modified":"2026-06-04T10:03:13.313824144Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741286348","title":"Fix of 5 CVEs","description":"   * SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext\n     - debian/patches/CVE-2024-34459.patch: Fix buffer overread with `xmllint\n       --htmlout` by adding a missing bounds check\n     - CVE-2024-34459\n   * SECURITY UPDATE: use-after-free vulnerability in xinclude.c\n     - debian/patches/CVE-2022-49043.patch: Fix use-after-free in\n       xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free\n     - CVE-2022-49043\n   * SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in\n     valid.c\n     - debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in\n       xmlSnprintfElements caused by improperly calculating qname length\n     - CVE-2025-24928\n   * SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c\n     - debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child\n       axis to generate XML_OP_ELEM like the case without an axis\n     - CVE-2025-27113\n   * SECURITY UPDATE: use-after-free vulnerability in XML schema processing\n     - debian/patches/CVE-2024-56171.patch: Fix use-after-free after\n       xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and\n       xmlSchemaBubbleIDCNodeTables\n     - CVE-2024-56171","status":"published","published":"2025-03-06T18:39:13Z","modified":"2026-06-04T10:03:23.679641357Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1742577756","title":"libxml2: Fix of CVE-2022-49043","description":"- CVE-2022-49043: fix use-after-free vulnerability in xmlXIncludeAddNode","status":"published","published":"2025-03-21T17:22:43Z","modified":"2026-06-01T00:33:21.006880408Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1742578098","title":"libxml2: Fix of CVE-2022-49043","description":"- CVE-2022-49043: fix use-after-free vulnerability in xmlXIncludeAddNode","status":"published","published":"2025-03-21T17:28:26Z","modified":"2026-06-01T00:33:23.02820636Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1742914538","title":"libxml2: Fix of CVE-2022-49043","description":"- CVE-2022-49043: fix use-after-free vulnerability in xmlXIncludeAddNode","status":"published","published":"2025-03-25T14:55:44Z","modified":"2026-06-01T00:32:58.099568477Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1761139574","title":"libxml2: Fix of CVE-2022-49043","description":"- CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode, free URI after reporting\n  the error to avoid use-after-free","status":"published","published":"2025-10-22T13:26:21Z","modified":"2026-06-01T00:33:16.733545483Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1761673925","title":"libxml2: Fix of CVE-2022-49043","description":"- CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode, free URI after reporting\n  the error to avoid use-after-free","status":"published","published":"2025-10-28T17:52:13Z","modified":"2026-06-01T00:33:25.837983441Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1778491896","title":"libxml2: Fix of CVE-2022-49043","description":"- CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode by deferring\n  xmlFree(URI) until after the error path has consumed the value","status":"published","published":"2026-05-11T09:31:41Z","modified":"2026-06-01T00:33:28.279959762Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778492595","title":"libxml2: Fix of CVE-2022-49043","description":"- CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode by deferring\n  xmlFree(URI) until after the error path has consumed the value","status":"published","published":"2026-05-13T08:53:11Z","modified":"2026-06-01T00:33:18.973960629Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1779215759","title":"libxml2: Fix of CVE-2022-49043","description":"- CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode by deferring\n  xmlFree(URI) until after the error path has consumed the value","status":"published","published":"2026-05-19T18:36:03Z","modified":"2026-06-01T00:33:27.437575794Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"DLA-4064-1","title":"libxml2 - security update","status":"published","published":"2025-02-22T00:00:00Z","modified":"2026-03-09T01:20:30.558703Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5949-1","title":"libxml2 - security update","status":"published","published":"2025-06-26T00:00:00Z","modified":"2026-03-09T02:09:32.257423Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0034","title":"Updated libxml2 packages fix security vulnerability","description":"xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a\nuse-after-free. (CVE-2022-49043)\n","status":"published","published":"2025-02-03T23:13:43Z","modified":"2026-04-16T04:40:51.664779811Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"SUSE-SU-2025:0300-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. (bsc#1236460)\n","status":"published","published":"2025-01-30T14:49:48Z","modified":"2026-02-04T03:43:19.016094Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:0303-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. (bsc#1236460)\n","status":"published","published":"2025-01-30T14:51:06Z","modified":"2026-02-04T03:55:57.98161Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:0341-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. (bsc#1236460)\n","status":"published","published":"2025-02-03T16:33:20Z","modified":"2026-02-04T03:54:40.100031Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0348-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. (bsc#1236460)\n","status":"published","published":"2025-02-04T07:10:27Z","modified":"2026-02-04T03:41:56.254256Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"USN-7240-1","title":"libxml2 vulnerabilities","description":"It was discovered that libxml2 incorrectly handled certain memory\noperations. A remote attacker could use this issue to cause libxml2 to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2022-49043)\n\nIt was discovered that the libxml2 xmllint tool incorrectly handled\ncertain memory operations. If a user or automated system were tricked into\nrunning xmllint on a specially crafted xml file, a remote attacker could\ncause xmllint to crash, resulting in a denial of service. (CVE-2024-34459)\n","status":"published","published":"2025-01-29T15:20:24Z","modified":"2026-04-22T10:55:00.954601Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7302-1","title":"libxml2 vulnerabilities","description":"It was discovered that libxml2 incorrectly handled certain memory\noperations. A remote attacker could use this issue to cause libxml2 to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS. (CVE-2022-49043)\n\nIt was discovered that the libxml2 xmllint tool incorrectly handled\ncertain memory operations. If a user or automated system were tricked into\nrunning xmllint on a specially crafted xml file, a remote attacker could\ncause xmllint to crash, resulting in a denial of service. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-34459)\n\nIt was discovered that libxml2 did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2024-56171) \n\nIt was discovered that libxml2 could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. (CVE-2025-24928)\n\nIt was discovered that libxml2 could be made to dereference invalid memory.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2025-27113)\n","status":"published","published":"2025-02-25T19:23:47Z","modified":"2026-06-25T13:31:46.031195386Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}