{"id":"CVE-2025-9714","aliases":["ALSA-2025:22376","ALSA-2026:11349","ALSA-2026:69655","BELL-CVE-2025-9714","CLSA-2025-1759411642","CLSA-2025-1760020147","CLSA-2025-1760020311","CLSA-2025-1760020498","CLSA-2025-1761312327","CLSA-2025-1763031933","CLSA-2026-1767608985","CLSA-2026-1768943030","CLSA-2026-1781534276","CLSA-2026-1781607534","CLSA-2026-1781619427","CLSA-2026-1790241783","CLSA-2026-1790242021","CLSA-2026-1790242323","DEBIAN-CVE-2025-9714","DLA-4319-1","EUVD-2025-27609","GHSA-fmj5-rvmp-845r","JLSEC-2025-91","OESA-2025-2255","OESA-2025-2285","RHSA-2025:22162","RHSA-2025:22163","RHSA-2025:22177","RHSA-2025:22376","RHSA-2025:22377","RHSA-2026:11349","RHSA-2026:14832","RHSA-2026:14858","RHSA-2026:15967","RHSA-2026:22420","RHSA-2026:7519","RLSA-2025:22376","RLSA-2026:11349","ROOT-OS-DEBIAN-12-CVE-2025-9714","ROOT-OS-DEBIAN-13-CVE-2025-9714","SUSE-SU-2025:4104-1","SUSE-SU-2025:4115-1","SUSE-SU-2025:4116-1","UBUNTU-CVE-2025-9714","USN-7743-1"],"status":"published","title":"Stack overflow in libxml2","description":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00159,"percentile":0.0512,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-674"],"published":"2025-09-02T17:16:04.925878Z","modified":"2026-10-29T11:32:29Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libxml2","fixed_in":["2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libxml2-devel","fixed_in":["2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-libxml2","fixed_in":["2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libxml2","fixed_in":["2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libxml2-devel","fixed_in":["2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-libxml2","fixed_in":["2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-dev","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-doc","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-utils","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python-libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libxml2-dev","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libxml2-doc","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libxml2-utils","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"python-libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"python3-libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-dev","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-doc","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-utils","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python-libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python3-libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libxml2-dev","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libxml2-doc","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libxml2-utils","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"python-libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"python3-libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2","fixed_in":["2.9.13-12.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-devel","fixed_in":["2.9.13-12.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-static","fixed_in":["2.9.13-12.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libxml2","fixed_in":["2.9.13-12.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-devel","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-python","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-static","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-devel","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-python","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-static","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libxml2","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libxml2-devel","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libxml2-python","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libxml2-static","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2-devel","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2-python","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2-static","fixed_in":["2.9.1-6.0.13.el7_9.6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3~deb12u5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-2.1+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.14.5+dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"libxml2","fixed_in":["2.9.10+dfsg-6.7+deb11u9"],"sources":["osv"]},{"ecosystem":"Julia","package":"XML2_jll","fixed_in":["2.10.3+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libxml2","fixed_in":["2.9.10-50.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libxslt","fixed_in":["1.1.34-10.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-3.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-3.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libxml2","fixed_in":["0:2.9.13-3.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-3.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-3.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-3.el9_2.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-13.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-13.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-13.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-13.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libxml2","fixed_in":["0:2.9.13-13.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-13.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-13.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-13.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-13.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-1.el9_0.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-1.el9_0.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-1.el9_0.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-1.el9_0.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libxml2","fixed_in":["0:2.9.13-1.el9_0.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-1.el9_0.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-1.el9_0.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-1.el9_0.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-1.el9_0.8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-12.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.13-12.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxml2-devel","fixed_in":["0:2.9.13-12.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-12.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libxml2","fixed_in":["0:2.9.13-12.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.13-12.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.13-12.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"python3-libxml2","fixed_in":["0:2.9.13-12.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.13-12.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libxml2","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libxml2","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-9.el8_4.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libxml2","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libxml2","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-16.el8_8.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libxml2","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libxml2","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libxml2","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-13.el8_6.13"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libxml2","fixed_in":["0:2.9.1-6.el7_9.14"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libxml2-debuginfo","fixed_in":["0:2.9.1-6.el7_9.14"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libxml2-devel","fixed_in":["0:2.9.1-6.el7_9.14"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libxml2-python","fixed_in":["0:2.9.1-6.el7_9.14"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libxml2-static","fixed_in":["0:2.9.1-6.el7_9.14"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libxml2","fixed_in":["0:2.9.13-14.el9_7"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libxml2","fixed_in":["0:2.9.7-21.el8_10.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","fixed_in":["2.9.1+dfsg1-3ubuntu4.13+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+esm10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","fixed_in":["2.9.13+dfsg-1ubuntu0.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3ubuntu3.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-21.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-21.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-21.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els13"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.11.el7_9.6.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.13.el7_9.6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u5"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1","2.9.14+dfsg-1.3~deb12u2","2.9.14+dfsg-1.3~deb12u3","2.9.14+dfsg-1.3~deb12u4"]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u2"}]}],"versions":["2.12.7+dfsg+really2.9.14-2.1","2.12.7+dfsg+really2.9.14-2.1+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.5+dfsg-0.1"}]}],"versions":["2.12.7+dfsg+really2.9.14-2.1","2.13.1+dfsg-0exp1","2.13.3+dfsg-0exp1","2.13.3+dfsg-0exp2","2.14.1+dfsg-0exp1","2.14.2+dfsg-0exp1","2.14.3+dfsg-0exp1","2.14.3+dfsg-0exp2","2.14.3+dfsg-0exp3","2.14.4+dfsg-0exp1","2.14.5+dfsg-0exp1","2.14.5+dfsg-0exp2"]},{"source":"osv","ecosystem":"Debian:11","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.7+deb11u9"}]}],"versions":["2.9.10+dfsg-6.7","2.9.10+dfsg-6.7+deb11u1","2.9.10+dfsg-6.7+deb11u2","2.9.10+dfsg-6.7+deb11u3","2.9.10+dfsg-6.7+deb11u4","2.9.10+dfsg-6.7+deb11u5","2.9.10+dfsg-6.7+deb11u6","2.9.10+dfsg-6.7+deb11u7","2.9.10+dfsg-6.7+deb11u8"]},{"source":"osv","ecosystem":"Julia","package":"XML2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.10.3+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-50.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-10.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-3.el9_2.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-13.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-13.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-13.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-13.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-13.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-13.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-13.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-13.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-13.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-1.el9_0.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-1.el9_0.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-1.el9_0.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-1.el9_0.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-1.el9_0.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-1.el9_0.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-1.el9_0.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-1.el9_0.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-1.el9_0.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-12.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-12.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-12.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-12.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-12.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-12.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-12.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-12.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-12.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-9.el8_4.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-16.el8_8.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-13.el8_6.13"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el7_9.14"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el7_9.14"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el7_9.14"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el7_9.14"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el7_9.14"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxml2-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_7"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.93.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.93.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.88.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.88.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.88.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.50.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.50.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.50.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.50.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm9"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4","2.9.1+dfsg1-3ubuntu4.13+esm5","2.9.1+dfsg1-3ubuntu4.13+esm6","2.9.1+dfsg1-3ubuntu4.13+esm7","2.9.1+dfsg1-3ubuntu4.13+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm10"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4","2.9.3+dfsg1-1ubuntu0.7+esm5","2.9.3+dfsg1-1ubuntu0.7+esm6","2.9.3+dfsg1-1ubuntu0.7+esm7","2.9.3+dfsg1-1ubuntu0.7+esm8","2.9.3+dfsg1-1ubuntu0.7+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+esm5"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8","2.9.4+dfsg1-6.1ubuntu1.9","2.9.4+dfsg1-6.1ubuntu1.9+esm1","2.9.4+dfsg1-6.1ubuntu1.9+esm2","2.9.4+dfsg1-6.1ubuntu1.9+esm3","2.9.4+dfsg1-6.1ubuntu1.9+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+esm2"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6","2.9.10+dfsg-5ubuntu0.20.04.7","2.9.10+dfsg-5ubuntu0.20.04.8","2.9.10+dfsg-5ubuntu0.20.04.9","2.9.10+dfsg-5ubuntu0.20.04.10","2.9.10+dfsg-5ubuntu0.20.04.10+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.9"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4","2.9.13+dfsg-1ubuntu0.5","2.9.13+dfsg-1ubuntu0.6","2.9.13+dfsg-1ubuntu0.7","2.9.13+dfsg-1ubuntu0.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.5"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3","2.9.14+dfsg-1.3ubuntu3.1","2.9.14+dfsg-1.3ubuntu3.2","2.9.14+dfsg-1.3ubuntu3.3","2.9.14+dfsg-1.3ubuntu3.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm9"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4","2.9.1+dfsg1-3ubuntu4.13+esm5","2.9.1+dfsg1-3ubuntu4.13+esm6","2.9.1+dfsg1-3ubuntu4.13+esm7","2.9.1+dfsg1-3ubuntu4.13+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm10"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4","2.9.3+dfsg1-1ubuntu0.7+esm5","2.9.3+dfsg1-1ubuntu0.7+esm6","2.9.3+dfsg1-1ubuntu0.7+esm7","2.9.3+dfsg1-1ubuntu0.7+esm8","2.9.3+dfsg1-1ubuntu0.7+esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+esm5"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8","2.9.4+dfsg1-6.1ubuntu1.9","2.9.4+dfsg1-6.1ubuntu1.9+esm1","2.9.4+dfsg1-6.1ubuntu1.9+esm2","2.9.4+dfsg1-6.1ubuntu1.9+esm3","2.9.4+dfsg1-6.1ubuntu1.9+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+esm2"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6","2.9.10+dfsg-5ubuntu0.20.04.7","2.9.10+dfsg-5ubuntu0.20.04.8","2.9.10+dfsg-5ubuntu0.20.04.9","2.9.10+dfsg-5ubuntu0.20.04.10","2.9.10+dfsg-5ubuntu0.20.04.10+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.9"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4","2.9.13+dfsg-1ubuntu0.5","2.9.13+dfsg-1ubuntu0.6","2.9.13+dfsg-1ubuntu0.7","2.9.13+dfsg-1ubuntu0.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.5"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3","2.9.14+dfsg-1.3ubuntu3.1","2.9.14+dfsg-1.3ubuntu3.2","2.9.14+dfsg-1.3ubuntu3.3","2.9.14+dfsg-1.3ubuntu3.4"]}],"products":[{"vendor":"gnome","product":"libxml2"},{"vendor":"libxml2","product":"libxml2"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21","tags":["patch","Patch","fix","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-577017.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9714","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fmj5-rvmp-845r"},{"url":"https://access.redhat.com/errata/RHSA-2025:22376","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9714","tags":["report"]},{"url":"https://bugzilla.redhat.com/2392605","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-22376.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:11349","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-11349.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69655","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6653","tags":["report"]},{"url":"https://bugzilla.redhat.com/2491354","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-69655.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-9714","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1759411642.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1760020147.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2025-1760020311.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1760020498.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761312327.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27113","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32415","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6021","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1763031933.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1767608985.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1768943030.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1781534276.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45322","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1781607534.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1781619427.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790241783.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790242021.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790242323.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9714.json","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-9714","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2255","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2285","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22162","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392605","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22162.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9714","tags":["advisory","report"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/148","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22163","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22163.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22177","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22177.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22376.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22377","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22377.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11349.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:14832","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14832.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:14858","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14858.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:15967","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_15967.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22420","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22420.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7519","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32415","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32414","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6170","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6021","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-49796","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-49795","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-49794","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-26434","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0992","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0990","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0989","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1757","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7519.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372406","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6021","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/926","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372952","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6170","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6170","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/941","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393475","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-26434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26434","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/5e7874015ef5ed8b2705eb2f7b0960f56f7760ea","tags":["article"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-26434","tags":["article"]},{"url":"https://source.android.com/security/bulletin/android-16","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32414","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/889","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360768","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32415","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/890","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372373","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-49794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49794","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/931","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-49795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49795","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/932","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-49796","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49796","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/933","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2429933","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0989","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0989","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/998","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2429959","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0990","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0990","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2429975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0992","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0992","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2435940","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1757","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/1009","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2025:22376","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:11349","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254104-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1247850","tags":["report"]},{"url":"https://bugzilla.suse.com/1249076","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9714","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254115-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254116-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-9714","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7743-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-9714","title":"Stack overflow in libxml2","description":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.","status":"published","published":"2025-09-10T18:43:12.204Z","modified":"2026-05-12T12:02:43.668Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:32:33.755525Z"}],"euvd":[{"id":"EUVD-2025-27609","description":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.","status":"published","published":"2025-09-10T18:43:12Z","modified":"2026-05-12T12:02:43Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:04:38.188393Z"}],"ghsa":[{"id":"GHSA-fmj5-rvmp-845r","title":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a...","description":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.","status":"published","published":"2025-09-10T21:30:19Z","modified":"2026-05-12T15:31:06Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T15:08:03.879292Z"}],"nvd":[{"id":"CVE-2025-9714","description":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.","status":"published","published":"2025-09-10T19:15:42.707Z","modified":"2026-10-19T17:10:00.173Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:11:28.834562Z"}],"osv":[{"id":"BELL-CVE-2025-9714","title":"CVE-2025-9714 does not affect BellSoft software","status":"withdrawn","published":"2025-09-02T17:16:04.925878Z","modified":"2026-01-26T09:47:35.494075Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"CVE-2025-9714","title":"Stack overflow in libxml2","description":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.","status":"published","published":"2025-09-10T18:43:12.204Z","modified":"2026-10-28T11:06:43.180595666Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T15:44:53.490346Z"},{"id":"DEBIAN-CVE-2025-9714","description":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.","status":"published","published":"2025-09-10T19:15:42.707Z","modified":"2026-10-23T17:47:24.377788313Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:48.440897Z"},{"id":"JLSEC-2025-91","title":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a...","description":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.","status":"published","published":"2025-10-17T17:40:51.659Z","modified":"2026-07-25T18:23:53.69907968Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2025-2255","title":"libxml2 security update","description":"This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libxstl/libxml2. The \u0026apos;exsltDynMapFunction\u0026apos; function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling \u0026apos;dyn:map()\u0026apos;, leading to stack exhaustion and a local denial of service.(CVE-2025-9714)","status":"published","published":"2025-09-12T11:09:19Z","modified":"2026-08-18T01:19:09.29596711Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2285","title":"libxslt security update","description":"Libxslt is the XSLT C library developed for the GNOME project\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libxstl/libxml2. The \u0026apos;exsltDynMapFunction\u0026apos; function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling \u0026apos;dyn:map()\u0026apos;, leading to stack exhaustion and a local denial of service.(CVE-2025-9714)","status":"published","published":"2025-09-12T11:09:21Z","modified":"2026-08-18T01:19:10.737160636Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2025:22162","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-11-26T10:17:33Z","modified":"2026-10-09T10:15:28Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22163","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-11-26T10:17:34Z","modified":"2026-10-09T10:15:29Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22177","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-11-27T10:04:31Z","modified":"2026-10-09T10:15:30Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22376","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-12-01T10:04:09Z","modified":"2026-10-09T10:15:35Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22377","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2025-12-01T10:04:10Z","modified":"2026-10-09T10:15:36Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2026:11349","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2026-04-29T10:06:29Z","modified":"2026-10-09T10:18:23Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:14832","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2026-05-08T10:05:24Z","modified":"2026-10-09T10:19:27Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:14858","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2026-05-08T10:05:27Z","modified":"2026-10-09T10:19:29Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:15967","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2026-05-12T10:06:30Z","modified":"2026-10-09T10:19:40Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:22420","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2026-06-02T10:08:44Z","modified":"2026-10-09T10:22:26Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:7519","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:11:16Z","modified":"2026-10-15T10:27:00Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2025:22376","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-12-02T09:04:29.172236Z","modified":"2025-12-02T10:49:23.279809Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2026:11349","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-29T06:00:44.573482Z","modified":"2026-04-29T06:32:21.666841Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-9714","description":"Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.","status":"published","published":"2025-09-04T00:00:00Z","modified":"2026-04-22T16:16:43.278493Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:58.519486Z"},{"id":"ALSA-2025:22376","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.  \n\nSecurity Fix(es):  \n\n  * libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-01T00:00:00Z","modified":"2026-10-29T11:32:29.10654028Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2026:11349","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.  \n\nSecurity Fix(es):  \n\n  * libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (CVE-2025-9714)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-28T00:00:00Z","modified":"2026-10-29T11:02:23.431445976Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:69655","title":"Moderate: libxml2 security, bug fix, and enhancement update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.  \n\nSecurity Fix(es):  \n\n  * libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * libxml2: CVE-2025-9714 fix (AlmaLinux-119279) backported wrong upstream commit ? dyn:map recursion still crashes (JIRA:AlmaLinux-249282)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-21T00:00:00Z","modified":"2026-10-29T11:02:29.31182438Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"CLSA-2025-1759411642","title":"libxml2: Fix of CVE-2025-9714","description":"- CVE-2025-9714: preserve recursion depth across recursive calls to prevent\n  stack overflow in XPath evaluation","status":"published","published":"2025-10-02T13:27:31Z","modified":"2026-06-01T00:31:24.21719033Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1760020147","title":"Fix CVE(s): CVE-2025-9714","description":"   * SECURITY UPDATE: uncontrolled recursion causing stack overflow via crafted\n     XPath expressions\n     - debian/patches/CVE-2025-9714-*.patch: Add comprehensive XPath DoS protection\n       including operation limits, recursion depth controls, and proper handling\n       of recursive invocations to prevent stack overflows and resource exhaustion\n     - CVE-2025-9714","status":"published","published":"2025-10-09T14:29:16Z","modified":"2026-06-04T10:04:14.519744Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1760020311","title":"Fix CVE(s): CVE-2025-9714","description":"   * SECURITY UPDATE: uncontrolled recursion leading to stack overflow via\n     crafted XPath expressions\n     - debian/patches/CVE-2025-9714.patch: Make XPath depth check work with\n       recursive invocations to prevent stack overflows\n     - CVE-2025-9714","status":"published","published":"2025-10-09T14:32:00Z","modified":"2026-06-04T10:03:50.878765Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1760020498","title":"Fix CVE(s): CVE-2025-9714","description":"   * SECURITY UPDATE: uncontrolled recursion causing stack overflow via crafted\n     XPath expressions\n     - debian/patches/CVE-2025-9714-*.patch: Add comprehensive XPath DoS protection\n       including operation limits, recursion depth controls, and proper handling\n       of recursive invocations to prevent stack overflows and resource exhaustion\n     - CVE-2025-9714","status":"published","published":"2025-10-09T14:35:01Z","modified":"2026-06-04T10:04:15.437493Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1761312327","title":"Fix of 6 CVEs","description":"   * SECURITY UPDATE: uncontrolled recursion leading to stack overflow via\n     crafted XPath expressions\n     - debian/patches/CVE-2025-9714.patch: Make XPath depth check work with\n       recursive invocations to prevent stack overflows\n     - CVE-2025-9714","status":"published","published":"2026-08-07T08:51:58Z","modified":"2026-10-26T09:31:52.132335841Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763031933","title":"libxml2: Fix of 3 CVEs","description":"- CVE-2025-9714: additional fixes\n- CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c\n- CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and\n  xmlSchemaBubbleIDCNodeTables in xmlschemas.c","status":"published","published":"2025-11-14T14:44:40Z","modified":"2026-10-21T10:48:17.705116196Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1767608985","title":"libxml2: Fix of CVE-2025-9714","description":"- CVE-2025-9714: fix XPath depth check to work with recursive invocations","status":"published","published":"2026-01-05T10:29:49Z","modified":"2026-06-01T00:32:40.306361813Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1768943030","title":"libxml2: Fix of CVE-2025-9714","description":"- revert fixes for CVE-2025-9714 due to build failures due to XPath error","status":"published","published":"2026-01-23T17:42:41Z","modified":"2026-06-01T00:33:25.889304642Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1781534276","title":"libxml2: Fix of 12 CVEs","description":"- CVE-2023-29469: guard xmlDictComputeFastKey against namelen \u003c= 0 to prevent\n  out-of-bounds read when hashing zero-length or negative-length keys\n- CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered\n  by malformed XML when default error handler interacts with freed memory\n- CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it\n  cannot overread the buffer when scanning for newline / carriage-return\n- CVE-2025-9714: keep and restore XPath context depth across recursive\n  xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack\n  overflow when the recursion limit was being reset prematurely","status":"published","published":"2026-06-29T10:41:06Z","modified":"2026-10-26T09:31:54.504328039Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781607534","title":"libxml2: Fix of 12 CVEs","description":"- CVE-2023-29469: guard xmlDictComputeFastKey against namelen \u003c= 0 to prevent\n  out-of-bounds read when hashing zero-length or negative-length keys\n- CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered\n  by malformed XML when default error handler interacts with freed memory\n- CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it\n  cannot overread the buffer when scanning for newline / carriage-return\n- CVE-2025-9714: keep and restore XPath context depth across recursive\n  xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack\n  overflow when the recursion limit was being reset prematurely","status":"published","published":"2026-06-29T10:51:43Z","modified":"2026-10-26T09:31:58.132002561Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1781619427","title":"libxml2: Fix of 4 CVEs","description":"- CVE-2023-29469: guard xmlDictComputeFastKey against namelen \u003c= 0 to prevent\n  out-of-bounds read when hashing zero-length or negative-length keys\n- CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered\n  by malformed XML when default error handler interacts with freed memory\n- CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it\n  cannot overread the buffer when scanning for newline / carriage-return\n- CVE-2025-9714: keep and restore XPath context depth across recursive\n  xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack\n  overflow when the recursion limit was being reset prematurely","status":"published","published":"2026-07-07T15:41:38Z","modified":"2026-10-26T09:31:41.652386338Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1790241783","title":"libxml2: Fix of CVE-2025-9714","description":"- rebase to 2.9.1-6.0.13.el7_9.6\n- replace the TuxCare CVE-2025-9714 backport (Patch229) with the vendor's\n  Patch1007, which guards six evaluation paths where ours guarded three\n- CVE-2025-9714: initialise the XPath maxDepth the vendor's patch adds to\n  upstream's XPATH_MAX_RECURSION_DEPTH instead of INT_MAX, which left every\n  recursion guard it adds unreachable\n- all other TuxCare CVE patches are unchanged: Patch200-232 remain declared\n  and applied","status":"published","published":"2026-09-24T09:23:12Z","modified":"2026-10-26T09:31:56.406850599Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790242021","title":"libxml2: Fix of CVE-2025-9714","description":"- rebase to 2.9.1-6.0.13.el7_9.6\n- replace the TuxCare CVE-2025-9714 backport (Patch229) with the vendor's\n  Patch1007, which guards six evaluation paths where ours guarded three\n- CVE-2025-9714: initialise the XPath maxDepth the vendor's patch adds to\n  upstream's XPATH_MAX_RECURSION_DEPTH instead of INT_MAX, which left every\n  recursion guard it adds unreachable\n- all other TuxCare CVE patches are unchanged: Patch200-232 remain declared\n  and applied","status":"published","published":"2026-09-24T09:27:11Z","modified":"2026-10-26T09:31:59.280835455Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790242323","title":"libxml2: Fix of CVE-2025-9714","description":"- rebase to 2.9.1-6.0.13.el7_9.6\n- replace the TuxCare CVE-2025-9714 backport (Patch229) with the vendor's\n  Patch1007, which guards six evaluation paths where ours guarded three\n- CVE-2025-9714: initialise the XPath maxDepth the vendor's patch adds to\n  upstream's XPATH_MAX_RECURSION_DEPTH instead of INT_MAX, which left every\n  recursion guard it adds unreachable\n- all other TuxCare CVE patches are unchanged: Patch200-232 remain declared\n  and applied","status":"published","published":"2026-09-28T08:48:21Z","modified":"2026-10-26T09:31:48.762661394Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"DLA-4319-1","title":"libxml2 - security update","status":"published","published":"2025-09-30T00:00:00Z","modified":"2025-09-30T22:17:08.381361Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-9714","title":"CVE-2025-9714 in rootio-libxml2 - Patched by Root","description":"Root has patched CVE-2025-9714 in the rootio-libxml2 package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2025-11-26T06:32:07Z","modified":"2026-04-30T02:01:15.706459Z","updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2025-9714","title":"CVE-2025-9714 in rootio-libxml2 - Patched by Root","description":"Root has patched CVE-2025-9714 in the rootio-libxml2 package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2025-11-04T16:30:58Z","modified":"2026-07-21T14:00:18.326193026Z","updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"SUSE-SU-2025:4104-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2025-9714: Fixed infinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (bsc#1249076)\n- CVE-2025-8732: Fixed infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247850)\n","status":"published","published":"2025-11-14T10:04:07Z","modified":"2026-03-23T04:50:22.597086Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4115-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2025-9714: Fixed inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (bsc#1249076)\n- CVE-2025-8732: Fixed infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247850)\n","status":"published","published":"2025-11-17T07:25:57Z","modified":"2026-02-04T04:32:10.032889Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4116-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2025-9714: Fixed inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (bsc#1249076)\n- CVE-2025-8732: Fixed infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247850)\n","status":"published","published":"2025-11-17T07:26:16Z","modified":"2026-02-04T03:36:11.084502Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"USN-7743-1","title":"libxml2 vulnerability","description":"Nikita Sveshnikov discovered that libxml2 incorrectly handled recursion\nwhen processing XPath expressions. An attacker could possibly use this\nissue to cause a denial of service.","status":"published","published":"2025-09-10T13:39:57Z","modified":"2026-06-25T13:32:31.263016747Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}