{"id":"CVE-2023-29469","aliases":["ALPINE-CVE-2023-29469","ALSA-2023:4349","ALSA-2023:4529","AZL-26282","BELL-CVE-2023-29469","CLSA-2023-1682593947","CLSA-2024-1717691762","CLSA-2024-1717692967","CLSA-2026-1781534276","CLSA-2026-1781607534","CLSA-2026-1781619427","DEBIAN-CVE-2023-29469","DLA-3405-1","DSA-5391-1","EUVD-2023-33038","GHSA-7jv7-hr35-fwjr","JLSEC-2025-80","MGASA-2023-0157","OESA-2023-1262","RHSA-2023:4349","RHSA-2023:4529","RHSA-2024:0413","RLSA-2023:4529","SUSE-SU-2023:2048-1","SUSE-SU-2023:2053-1","SUSE-SU-2023:2054-1","SUSE-SU-2023:3665-1","UBUNTU-CVE-2023-29469","USN-6028-1","openSUSE-SU-2024:12877-1","openSUSE-SU-2024:12963-1","openSUSE-SU-2024:13440-1","openSUSE-SU-2024:14174-1","openSUSE-SU-2025:14697-1","openSUSE-SU-2026:10356-1"],"status":"published","title":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted...","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01309,"percentile":0.70828,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415"],"published":"2023-04-12T00:00:00Z","modified":"2026-11-03T06:32:59Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"libxml2","fixed_in":["2.10.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libxml2","fixed_in":["2.10.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libxml2","fixed_in":["2.10.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libxml2","fixed_in":["2.10.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libxml2","fixed_in":["2.10.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libxml2","fixed_in":["2.10.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libxml2","fixed_in":["2.10.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libxml2","fixed_in":["2.10.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"qt5-qtwebengine","fixed_in":["5.15.12-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","fixed_in":["5.15.13-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","fixed_in":["5.15.13-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","fixed_in":["5.15.13-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","fixed_in":["5.15.13-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","fixed_in":["5.15.13-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","fixed_in":["5.15.13-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libxml2","fixed_in":["2.10.4-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.9.14+dfsg-1.2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.9.14+dfsg-1.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.9.14+dfsg-1.2"],"sources":["osv"]},{"ecosystem":"Julia","package":"XML2_jll","fixed_in":["2.10.4+0","2.12.0+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","fixed_in":["2.9.1+dfsg1-3ubuntu4.13+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","fixed_in":["2.9.13+dfsg-1ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.12-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-7+deb10u6"}]}],"versions":["2.9.4+dfsg1-7","2.9.4+dfsg1-7+deb10u1","2.9.4+dfsg1-7+deb10u2","2.9.4+dfsg1-7+deb10u3","2.9.4+dfsg1-7+deb10u4","2.9.4+dfsg1-7+deb10u5"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.7+deb11u4"}]}],"versions":["2.9.10+dfsg-6.7","2.9.10+dfsg-6.7+deb11u1","2.9.10+dfsg-6.7+deb11u2","2.9.10+dfsg-6.7+deb11u3"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"XML2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.10.4+0"},{"introduced":"2.11.5+0"},{"fixed":"2.12.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-7.7.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-34.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-36.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-5.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-5.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.4"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.62.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm5"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm5"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.6"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.3"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm5"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm5"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.6"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.3"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ruby3.2-rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1.5"}]}],"bundled":44},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-1.1"}]}],"bundled":44},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.9-1.4"}]}],"bundled":44}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/510","tags":["x_transferred","Issue Tracking","Vendor Advisory","report","web"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4","tags":["x_transferred","Release Notes","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230601-0006/","tags":["x_transferred","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230601-0006"},{"url":"https://github.com/advisories/GHSA-7jv7-hr35-fwjr"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-29469","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4349","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28484","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29469","tags":["report"]},{"url":"https://bugzilla.redhat.com/2185984","tags":["report"]},{"url":"https://bugzilla.redhat.com/2185994","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-4349.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4529","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-4529.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-29469","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1682593947","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1717691762.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1717692967.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1781534276.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9714","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1781607534.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1781619427.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29469.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-29469","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0157.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31810","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/O2AHHHTXMCLOVEDOB7VUJWRWH5RXZTEG/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5760-1","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31231","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1262","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185994","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4349.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28484","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29469","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4529.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0413","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235864","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0413.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40303","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40303","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40304","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39615","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39615","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/535","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2023:4529","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232048-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1065270","tags":["report"]},{"url":"https://bugzilla.suse.com/1199132","tags":["report"]},{"url":"https://bugzilla.suse.com/1204585","tags":["report"]},{"url":"https://bugzilla.suse.com/1210411","tags":["report"]},{"url":"https://bugzilla.suse.com/1210412","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29469","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232053-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209918","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232054-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233665-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201978","tags":["report"]},{"url":"https://bugzilla.suse.com/1214768","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39615","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-29469","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/09a2dd453007f9c7205274623acdd73747c22d64","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6028-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6028-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-28484","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29181","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U5YNW74OL2W7SH2XTAVN5TODNFIVFL3Y/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-29469","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2023-04-24T00:00:00Z","modified":"2026-10-14T23:03:50.674Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:35:28.643185Z"}],"euvd":[{"id":"EUVD-2023-33038","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2023-04-24T00:00:00Z","modified":"2026-10-14T23:03:50Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T17:27:11.209168Z"}],"ghsa":[{"id":"GHSA-7jv7-hr35-fwjr","title":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted...","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2023-04-24T21:30:30Z","modified":"2026-10-15T00:30:39Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:13:29.914076Z"}],"nvd":[{"id":"CVE-2023-29469","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2023-04-24T21:15:09.23Z","modified":"2026-10-14T23:17:17.977Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:07:56.683259Z"}],"osv":[{"id":"ALPINE-CVE-2023-29469","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2023-04-24T21:15:09.23Z","modified":"2026-11-03T06:32:59.106347729Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"AZL-26282","title":"CVE-2023-29469 affecting package libxml2 for versions less than 2.10.4-1","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2023-04-24T21:15:09Z","modified":"2026-04-21T04:23:35.72789Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-29469","title":"CVE-2023-29469 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:20.276859Z","modified":"2026-01-26T09:46:45.207829Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-29469","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2023-04-24T00:00:00Z","modified":"2026-10-28T02:30:51.586938531Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DEBIAN-CVE-2023-29469","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2023-04-24T21:15:09.23Z","modified":"2026-10-26T18:01:48.947130135Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"JLSEC-2025-80","title":"An issue was discovered in libxml2 before 2.10.4","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2025-10-17T17:40:51.659Z","modified":"2026-07-18T00:01:22.751429718Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2023-1262","title":"libxml2 security update","description":"This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.\r\n\r\nSecurity Fix(es):\r\n\r\nIn libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.(CVE-2023-28484)\r\n\r\nAn issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the \u0026apos;\\0\u0026apos; value).(CVE-2023-29469)","status":"published","published":"2023-04-28T11:05:44Z","modified":"2026-08-18T01:17:40.820832837Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:4349","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-16T12:20:46Z","modified":"2026-10-15T10:04:34Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4529","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-16T12:20:55Z","modified":"2026-10-15T10:04:36Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2024:0413","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-16T12:46:09Z","modified":"2026-10-15T10:06:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2023:4529","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)\n\n* libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-10-06T23:10:01.90335Z","modified":"2026-02-05T02:30:10.212954Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-29469","description":"An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\0' value).","status":"published","published":"2023-04-12T00:00:00Z","modified":"2026-04-22T14:05:23.579457Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2023:4349","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)\n* libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-08-01T00:00:00Z","modified":"2026-10-29T11:31:28.202190578Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:4529","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)\n* libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-08-08T00:00:00Z","modified":"2026-10-29T11:02:19.294307141Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2023-1682593947","title":"Fix CVE(s): CVE-2023-29469, CVE-2023-28484","description":"\n   * SECURITY UPDATE: Null dereference\n     - debian/patches/CVE-2023-28484.patch: Fix null-pointer-deref in\n       xmlSchemaFixupComplexType\n     - CVE-2023-28484\n   * SECURITY UPDATE: Fix a null pointer dereference\n     - debian/patches/fix-null-ptr-deref.patch: use XML_SCHEMAS_ANYTYPE\n       instead of a null pointer\n     - CVE-2023-28484\n   * SECURITY UPDATE: Logic or memory errors\n     - debian/patches/CVE-2023-29469.patch: check whether namelen is less than\n       or equal to zero\n     - CVE-2023-29469\n   * Add test suite\n     - debian/patches/enable-building-tests.patch: enable building tests\n     - debian/patches/fix-testapi.patch: fix buffer overflow in tests","status":"published","published":"2023-04-27T11:12:34Z","modified":"2026-06-04T10:03:32.018408356Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2024-1717691762","title":"libxml2: Fix of 2 CVEs","description":"- CVE-2023-29469: dict.c: fix non-deterministic hashing of empty dict strings\n- CVE-2023-28484: fix NULL pointer dereferences in xmlSchemaFixupComplexType\n  and xmlSchemaCheckCOSSTDerivedOK","status":"published","published":"2024-06-06T16:36:05Z","modified":"2026-10-21T10:48:07.818180491Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1717692967","title":"libxml2: Fix of 2 CVEs","description":"- CVE-2023-29469: dict.c: fix non-deterministic hashing of empty dict strings\n- CVE-2023-28484: fix NULL pointer dereferences in xmlSchemaFixupComplexType\n  and xmlSchemaCheckCOSSTDerivedOK","status":"published","published":"2024-06-06T16:56:10Z","modified":"2026-10-21T10:47:57.434521098Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2026-1781534276","title":"libxml2: Fix of 12 CVEs","description":"- CVE-2023-29469: guard xmlDictComputeFastKey against namelen \u003c= 0 to prevent\n  out-of-bounds read when hashing zero-length or negative-length keys\n- CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered\n  by malformed XML when default error handler interacts with freed memory\n- CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it\n  cannot overread the buffer when scanning for newline / carriage-return\n- CVE-2025-9714: keep and restore XPath context depth across recursive\n  xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack\n  overflow when the recursion limit was being reset prematurely","status":"published","published":"2026-06-29T10:41:06Z","modified":"2026-10-26T09:31:54.504328039Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781607534","title":"libxml2: Fix of 12 CVEs","description":"- CVE-2023-29469: guard xmlDictComputeFastKey against namelen \u003c= 0 to prevent\n  out-of-bounds read when hashing zero-length or negative-length keys\n- CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered\n  by malformed XML when default error handler interacts with freed memory\n- CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it\n  cannot overread the buffer when scanning for newline / carriage-return\n- CVE-2025-9714: keep and restore XPath context depth across recursive\n  xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack\n  overflow when the recursion limit was being reset prematurely","status":"published","published":"2026-06-29T10:51:43Z","modified":"2026-10-26T09:31:58.132002561Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781619427","title":"libxml2: Fix of 4 CVEs","description":"- CVE-2023-29469: guard xmlDictComputeFastKey against namelen \u003c= 0 to prevent\n  out-of-bounds read when hashing zero-length or negative-length keys\n- CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered\n  by malformed XML when default error handler interacts with freed memory\n- CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it\n  cannot overread the buffer when scanning for newline / carriage-return\n- CVE-2025-9714: keep and restore XPath context depth across recursive\n  xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack\n  overflow when the recursion limit was being reset prematurely","status":"published","published":"2026-07-07T15:41:38Z","modified":"2026-10-26T09:31:41.652386338Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"DLA-3405-1","title":"libxml2 - security update","status":"published","published":"2023-04-30T00:00:00Z","modified":"2026-03-09T01:01:29.74804Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5391-1","title":"libxml2 - security update","status":"published","published":"2023-04-20T00:00:00Z","modified":"2026-03-09T02:09:39.164621Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2023-0157","title":"Updated libxml2 packages fix security vulnerability","description":"NULL Pointer Dereference allows attackers to cause a denial of service (or\napplication crash). This only applies when lxml is used together with\nlibxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected.\nIt allows triggering crashes through forged input data, given a vulnerable\ncode sequence in the application. The vulnerability is caused by the\niterwalk function (also used by the canonicalize function). Such code\nshouldn't be in wide-spread use, given that parsing + iterwalk would\nusually be replaced with the more efficient iterparse function. However,\nan XML converter that serialises to C14N would also be vulnerable, for\nexample, and there are legitimate use cases for this code sequence. If\nuntrusted input is received (also remotely) and processed via iterwalk\nfunction, a crash can be triggered. (CVE-2022-2309)\nNULL dereference in xmlSchemaFixupComplexType. (CVE-2023-28484)\nHashing of empty dict strings isn't deterministic. (CVE-2023-29469)\n","status":"published","published":"2023-05-06T18:19:07Z","modified":"2026-04-16T04:42:34.157083933Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12877-1","title":"libxml2-2-2.10.4-1.1 on GA media","description":"These are all security issues fixed in the libxml2-2-2.10.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:26:46.182512Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:12963-1","title":"libQt5Pdf5-5.15.14-1.1 on GA media","description":"These are all security issues fixed in the libQt5Pdf5-5.15.14-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:14:35.977219Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13440-1","title":"ruby3.2-rubygem-nokogiri-1.15.4-1.1 on GA media","description":"These are all security issues fixed in the ruby3.2-rubygem-nokogiri-1.15.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:53:25.340025Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:14174-1","title":"ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media","description":"These are all security issues fixed in the ruby3.3-rubygem-nokogiri-1.15.5-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-12T00:00:00Z","modified":"2026-02-04T03:03:19.688417Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2025:14697-1","title":"ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media","description":"These are all security issues fixed in the ruby3.4-rubygem-nokogiri-1.18.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-25T00:00:00Z","modified":"2026-02-04T03:50:12.082525Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2026:10356-1","title":"ruby4.0-rubygem-nokogiri-1.18.9-1.4 on GA media","description":"These are all security issues fixed in the ruby4.0-rubygem-nokogiri-1.18.9-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-13T00:00:00Z","modified":"2026-03-14T08:44:10.568806Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"SUSE-SU-2023:2048-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).\n- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).\n- CVE-2022-29824: Fixed integer overflow leading to out-of-bounds write in buf.c (bsc#1199132). \n  \n  The following non-security bugs were fixed:\n\n- Added W3C conformance tests to the testsuite (bsc#1204585).\n- Fixed NULL pointer dereference when parsing invalid data (glgo#libxml2!15) (bsc#1065270) . \n","status":"published","published":"2023-04-26T19:06:04Z","modified":"2026-02-04T04:25:51.353864Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2053-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).\n- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).\n\nThe following non-security bug was fixed:\n\n- Remove unneeded dependency (bsc#1209918). \n","status":"published","published":"2023-04-27T09:31:16Z","modified":"2026-02-04T03:52:43.864498Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2054-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).\n- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).\n","status":"published","published":"2023-04-27T09:31:43Z","modified":"2026-02-04T04:17:25.450414Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:3665-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2023-29469: Fixed not deterministic hashing of empty dict strings (bsc#1210412).\n- CVE-2023-28484: Fixed NULL dereference in xmlSchemaFixupComplexType (bsc#1210411).\n- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).\n- CVE-2016-3709: Fixed cross-site scripting vulnerability in libxml (bsc#1201978).\n","status":"published","published":"2023-09-18T19:51:39Z","modified":"2025-05-02T04:29:41.699472Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6028-1","title":"libxml2 vulnerabilities","description":"It was discovered that lixml2 incorrectly handled certain XML files.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code. (CVE-2023-28484)\n\nIt was discovered that libxml2 incorrectly handled certain XML files.\nAn attacker could possibly use this issue to cause a crash.\n(CVE-2023-29469)\n","status":"published","published":"2023-04-19T13:42:53Z","modified":"2026-06-29T13:50:50.941841987Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}