{"id":"CVE-2024-25062","aliases":["ALPINE-CVE-2024-25062","ALSA-2024:2679","ALSA-2024:3626","AZL-34290","AZL-34961","BELL-CVE-2024-25062","BIT-java-2024-25062","BIT-java-min-2024-25062","BIT-jre-2024-25062","CLSA-2024-1708416911","CLSA-2024-1708426314","CLSA-2024-1708426517","CLSA-2024-1708427636","CLSA-2024-1708427829","CLSA-2024-1708639015","CLSA-2024-1708639232","CLSA-2024-1718029281","DEBIAN-CVE-2024-25062","DLA-4064-1","DSA-5949-1","EUVD-2024-22424","GHSA-x77r-6xxm-wjmx","JLSEC-2025-83","MGASA-2024-0172","OESA-2024-1183","RHSA-2024:2679","RHSA-2024:3299","RHSA-2024:3303","RHSA-2024:3625","RHSA-2024:3626","RLSA-2024:2679","RLSA-2024:3626","SUSE-SU-2024:0461-1","SUSE-SU-2024:0461-2","SUSE-SU-2024:0555-1","SUSE-SU-2024:0556-1","SUSE-SU-2024:0613-1","SUSE-SU-2024:0613-2","UBUNTU-CVE-2024-25062","USN-6658-1","USN-6658-2","openSUSE-SU-2024:13676-1"],"status":"published","title":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML...","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01314,"percentile":0.71122,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2024-02-04T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"libxml2","fixed_in":["2.11.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libxml2","fixed_in":["2.11.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libxml2","fixed_in":["2.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libxml2","fixed_in":["2.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libxml2","fixed_in":["2.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libxml2","fixed_in":["2.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libxml2","fixed_in":["2.12.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qt6-qtwebengine","fixed_in":["6.6.1-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qt6-qtwebengine","fixed_in":["6.6.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt6-qtwebengine","fixed_in":["6.6.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","fixed_in":["6.6.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.6.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.6.3-r1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libxml2","fixed_in":["2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libxml2-devel","fixed_in":["2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-libxml2","fixed_in":["2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libxml2","fixed_in":["2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libxml2-devel","fixed_in":["2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-libxml2","fixed_in":["2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libxml2","fixed_in":["2.10.4-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libxml2","fixed_in":["2.11.5-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libxml2","fixed_in":["2.10.4-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libxml2","fixed_in":["2.12.5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"libxml2","fixed_in":["2.10.4-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","fixed_in":["2.12.5-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["1.8.0","8.0.431"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["1.8.0","8.0.431"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["1.8.0","8.0.431"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-devel","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-static","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-devel","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-static","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-dev","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-doc","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-utils","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python-libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-dev","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-doc","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-utils","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python-libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python3-libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-devel","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-python","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-static","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2-devel","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2-python","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2-static","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2","fixed_in":["2.9.7-18.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-devel","fixed_in":["2.9.7-18.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-static","fixed_in":["2.9.7-18.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libxml2","fixed_in":["2.9.7-18.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"XML2_jll","fixed_in":["2.12.5+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libxml2","fixed_in":["2.10.4-1.3.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libxml2","fixed_in":["2.9.10-37.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libxml2","fixed_in":["2.9.10-39.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libxml2","fixed_in":["2.9.14-10.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"libxml2","fixed_in":["2.9.14-10.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"libxml2","fixed_in":["2.9.14-10.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"libxml2","fixed_in":["2.9.14-10.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-13.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-13.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2","fixed_in":["0:2.9.7-13.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-13.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-13.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-16.el8_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-16.el8_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2","fixed_in":["0:2.9.7-16.el8_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-16.el8_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-16.el8_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-3.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-3.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2","fixed_in":["0:2.9.13-3.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-3.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-3.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libxml2","fixed_in":["0:2.9.13-6.el9_4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libxml2","fixed_in":["0:2.9.7-18.el8_10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxml2","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libxml2","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxml2","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxml2","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-libxml2-python","fixed_in":["2.9.7-150000.3.66.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","fixed_in":["2.10.3-150500.5.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2","fixed_in":["2.10.3-150500.5.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libxml2","fixed_in":["2.10.3-150500.5.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libxml2-python","fixed_in":["2.10.3-150500.5.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libxml2","fixed_in":["2.9.4-46.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libxml2","fixed_in":["2.9.4-46.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-libxml2","fixed_in":["2.9.4-46.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libxml2","fixed_in":["2.9.4-46.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-libxml2","fixed_in":["2.9.4-46.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"libxml2","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"libxml2-python","fixed_in":["2.9.14-150400.5.28.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","fixed_in":["2.9.1+dfsg1-3ubuntu4.13+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","fixed_in":["2.9.13+dfsg-1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libxml2","fixed_in":["2.11.6-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.0"},{"fixed":"2.11.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.0"},{"fixed":"2.11.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.0"},{"fixed":"2.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.0"},{"fixed":"2.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.0"},{"fixed":"2.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.0"},{"fixed":"2.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.0"},{"fixed":"2.12.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.1-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.3-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.10.4-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.12.5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.10.4-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.12.5-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.431"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.431"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.431"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.7+deb11u6"}]}],"versions":["2.9.10+dfsg-6.7","2.9.10+dfsg-6.7+deb11u1","2.9.10+dfsg-6.7+deb11u2","2.9.10+dfsg-6.7+deb11u3","2.9.10+dfsg-6.7+deb11u4","2.9.10+dfsg-6.7+deb11u5"],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"],"bundled":10},{"source":"osv","ecosystem":"Julia","package":"XML2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.12.5+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-1.3.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-37.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-39.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-10.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-10.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-10.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-10.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-6.el9_4"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-18.el8_10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.66.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.28.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm6"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4","2.9.1+dfsg1-3ubuntu4.13+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm6"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4","2.9.3+dfsg1-1ubuntu0.7+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+esm1"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8","2.9.4+dfsg1-6.1ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.7"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.4"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.7"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.4"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm6"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4","2.9.1+dfsg1-3ubuntu4.13+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm6"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4","2.9.3+dfsg1-1ubuntu0.7+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+esm1"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8","2.9.4+dfsg1-6.1ubuntu1.9"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.6-2.1"}]}]}],"products":[{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"},{"vendor":"siemens","product":"sinec nms"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/tags","tags":["x_transferred","Release Notes","article","web"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/604","tags":["x_transferred","Exploit","Issue Tracking","evidence","report","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20241018-0009/","tags":["web","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-784301.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25062","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20241018-0009"},{"url":"https://github.com/advisories/GHSA-x77r-6xxm-wjmx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-25062","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2679","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-25062","tags":["report"]},{"url":"https://bugzilla.redhat.com/2262726","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2679.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3626","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3626.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-25062","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2024-17","tags":["advisory"]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2024-10-15","tags":["web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2024.html","tags":["web"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1708416911.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1708426314.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1708426517.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1708427636.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1708427829.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1708639015.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1708639232.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos8stream-els/CLSA-2024-1718029281.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25062.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-25062","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0172.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33184","tags":["report"]},{"url":"https://lwn.net/Articles/972329/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1183","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262726","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2679.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-25062","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3299","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3299.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3303","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3303.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3625","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3625.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3626.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2679","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3626","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240461-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219576","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25062","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240461-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240555-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240556-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240613-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240613-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-25062","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6658-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6658-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T00:00:00Z","modified":"2026-10-15T00:38:13.489Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:34:04.341725Z"}],"euvd":[{"id":"EUVD-2024-22424","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T00:00:00Z","modified":"2026-10-15T00:38:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:10.794682Z"}],"ghsa":[{"id":"GHSA-x77r-6xxm-wjmx","title":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML...","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T18:30:19Z","modified":"2026-10-15T03:33:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:13:30.561319Z"}],"nvd":[{"id":"CVE-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T16:15:45.12Z","modified":"2026-10-15T01:17:20.35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:09:34.891666Z"}],"osv":[{"id":"ALPINE-CVE-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T16:15:45.12Z","modified":"2026-11-03T06:32:49.490937488Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"AZL-34290","title":"CVE-2024-25062 affecting package libxml2 for versions less than 2.10.4-4","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T16:15:45Z","modified":"2026-04-21T04:27:05.406133Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-34961","title":"CVE-2024-25062 affecting package libxml2 for versions less than 2.11.5-4","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T16:15:45Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"BELL-CVE-2024-25062","status":"published","published":"2024-02-05T05:57:10.370648Z","modified":"2026-01-26T09:36:02.308886Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T00:00:00Z","modified":"2026-10-28T02:30:37.593129665Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:38.897406Z"},{"id":"DEBIAN-CVE-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T16:15:45.12Z","modified":"2026-11-02T12:00:58.114703803Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"JLSEC-2025-83","title":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2025-10-17T17:40:51.659Z","modified":"2026-07-18T00:01:25.113512627Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2024-1183","title":"libxml2 security update","description":"Library providing XML and HTML support.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.(CVE-2024-25062)","status":"published","published":"2024-02-23T11:06:38Z","modified":"2026-08-18T01:18:15.858940482Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:2679","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-12T20:14:51Z","modified":"2026-10-15T10:07:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3299","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-12T20:15:18Z","modified":"2026-10-15T10:07:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3303","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-12T20:16:07Z","modified":"2026-10-15T10:07:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3625","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-12T20:18:10Z","modified":"2026-10-15T10:08:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3626","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2024-09-12T20:18:21Z","modified":"2026-10-15T10:08:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2024-02-04T16:15:00Z","modified":"2026-04-22T14:42:10.030254Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"ALSA-2024:2679","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: use-after-free in XMLReader (CVE-2024-25062)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-02T00:00:00Z","modified":"2026-10-29T11:31:45.890937525Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3626","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of\nvarious XML standards.\n\nSecurity Fix(es):\n\n* libxml2: use-after-free in XMLReader (CVE-2024-25062)\n\nFor more details about the security issue(s), including the impact,\na CVSS score, acknowledgments, and other related information, refer\nto the CVE page(s) listed in the References section.","status":"published","published":"2024-06-05T00:00:00Z","modified":"2026-10-29T11:02:21.016373069Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"BIT-java-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2026-05-06T14:44:50.635Z","modified":"2026-09-08T08:47:59.674190388Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2026-05-06T14:44:53.304Z","modified":"2026-09-08T08:47:56.125149444Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","status":"published","published":"2026-05-08T05:46:27.913Z","modified":"2026-09-08T08:48:05.702172613Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"CLSA-2024-1708416911","title":"libxml2: Fix of CVE-2024-25062","description":"- CVE-2024-25062: Fix use-after-free issue in libxml2 XML Reader interface with\n  DTD validation and XInclude expansion enabled.","status":"published","published":"2024-02-20T08:15:14Z","modified":"2026-06-01T00:30:16.494900777Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708426314","title":"libxml2: Fix of CVE-2024-25062","description":"- CVE-2024-25062: Fix use-after-free issue in XML Reader interface","status":"published","published":"2024-02-20T10:51:57Z","modified":"2026-06-01T00:33:12.074315782Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708426517","title":"libxml2: Fix of CVE-2024-25062","description":"- CVE-2024-25062: Fix use-after-free issue in XML Reader interface","status":"published","published":"2024-02-20T10:55:21Z","modified":"2026-06-01T00:33:22.204114515Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708427636","title":"Fix CVE(s): CVE-2024-25062","description":"   * SECURITY UPDATE: Use-after-free in xmlValidatePopElement()\n     - debian/patches/CVE-2024-25062.patch: Fix use-after-free if XML Reader when\n       used with DTD validation and XInclude expansion\n     - CVE-2024-25062","status":"published","published":"2024-02-20T11:13:59Z","modified":"2026-06-04T10:03:44.084477Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708427829","title":"Fix CVE(s): CVE-2024-25062","description":"   * SECURITY UPDATE: Use-after-free in xmlValidatePopElement()\n     - debian/patches/CVE-2024-25062.patch: Fix use-after-free if XML Reader with\n       DTD validation and XInclude expansion by not expanding XIncludes when\n       backtracking\n     - CVE-2024-25062","status":"published","published":"2024-02-20T11:17:12Z","modified":"2026-06-04T10:04:25.473436Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708639015","title":"libxml2: Fix of CVE-2024-25062","description":"- CVE-2024-25062: Fix xmlValidatePopElement use-after-free when processing\n  crafted XML documents with DTD validation and XInclude expansion enabled\n- test suite was partially enabled","status":"published","published":"2024-02-22T21:56:58Z","modified":"2026-06-01T00:33:25.165586516Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708639232","title":"libxml2: Fix of CVE-2024-25062","description":"- CVE-2024-25062: Fix xmlValidatePopElement use-after-free in XML Reader\n  interface with DTD validation and XInclude expansion enabled\n- test suite was partially activated","status":"published","published":"2024-02-22T22:00:35Z","modified":"2026-06-01T00:33:03.29795749Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1718029281","title":"libxml2: Fix of CVE-2024-25062","description":"- CVE-2024-25062: Fix use-after-free issue in XML Reader interface","status":"published","published":"2024-06-10T14:21:24Z","modified":"2026-06-01T00:32:54.806622365Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"DLA-4064-1","title":"libxml2 - security update","status":"published","published":"2025-02-22T00:00:00Z","modified":"2026-03-09T01:20:30.558703Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5949-1","title":"libxml2 - security update","status":"published","published":"2025-06-26T00:00:00Z","modified":"2026-03-09T02:09:32.257423Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2024-0172","title":"Updated libxml2 packages fix a security vulnerability","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before\n2.12.5. When using the XML Reader interface with DTD validation and\nXInclude expansion enabled, processing crafted XML documents can lead to\nan xmlValidatePopElement use-after-free. (CVE-2024-25062)\n","status":"published","published":"2024-05-09T02:40:29Z","modified":"2026-04-16T04:42:23.329255336Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13676-1","title":"libxml2-2-2.11.6-2.1 on GA media","description":"These are all security issues fixed in the libxml2-2-2.11.6-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:15:54.822779Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:2679","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: use-after-free in XMLReader (CVE-2024-25062)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-10T14:32:36.204878Z","modified":"2026-02-04T17:15:13.788563Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:3626","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of\nvarious XML standards.\n\nSecurity Fix(es):\n\n* libxml2: use-after-free in XMLReader (CVE-2024-25062)\n\nFor more details about the security issue(s), including the impact,\na CVSS score, acknowledgments, and other related information, refer\nto the CVE page(s) listed in the References section.","status":"published","published":"2024-06-14T13:59:16.809606Z","modified":"2026-02-04T11:30:09.635513Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2024:0461-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).\n","status":"published","published":"2024-05-29T07:34:15Z","modified":"2025-05-02T04:36:31.925253Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0461-2","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).\n","status":"published","published":"2024-05-29T07:34:15Z","modified":"2026-02-04T02:24:02.955256Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0555-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).\n","status":"published","published":"2024-02-20T16:22:18Z","modified":"2026-02-04T03:37:47.059604Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0556-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).\n","status":"published","published":"2024-05-29T11:07:24Z","modified":"2026-02-04T03:57:38.862453Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0613-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).\n","status":"published","published":"2024-06-07T14:02:00Z","modified":"2026-02-04T04:05:06.500195Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0613-2","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).\n","status":"published","published":"2024-06-07T14:02:00Z","modified":"2026-02-04T04:04:50.872489Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"USN-6658-1","title":"libxml2 vulnerability","description":"It was discovered that libxml2 incorrectly handled certain XML documents. A\nremote attacker could possibly use this issue to cause libxml2 to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2024-02-26T13:57:11Z","modified":"2026-04-22T10:44:48.853765Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6658-2","title":"libxml2 vulnerability","description":"USN-6658-1 fixed a vulnerability in libxml2. This update\nprovides the corresponding updates for Ubuntu 14.04 LTS,\nUbuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that libxml2 incorrectly handled certain XML documents. A\n remote attacker could possibly use this issue to cause libxml2 to crash,\n resulting in a denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2024-03-11T18:25:02Z","modified":"2026-06-29T13:51:02.423963463Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}