{"id":"CVE-2026-0992","aliases":["AZL-74778","AZL-74783","BELL-CVE-2026-0992","CLSA-2026-1775649722","CLSA-2026-1775731413","CLSA-2026-1787063229","DEBIAN-CVE-2026-0992","EUVD-2026-2795","GHSA-cjqj-7q2q-jx9c","JLSEC-2026-1239","MGASA-2026-0027","OESA-2026-1598","RHSA-2026:7519","ROOT-OS-DEBIAN-12-CVE-2026-0992","ROOT-OS-DEBIAN-13-CVE-2026-0992","SUSE-SU-2026:0568-1","SUSE-SU-2026:0570-1","SUSE-SU-2026:0605-1","SUSE-SU-2026:0606-1","SUSE-SU-2026:0782-1","SUSE-SU-2026:20631-1","SUSE-SU-2026:20647-1","SUSE-SU-2026:20657-1","SUSE-SU-2026:20707-1","UBUNTU-CVE-2026-0992","openSUSE-SU-2026:10213-1","openSUSE-SU-2026:20312-1"],"status":"published","title":"Libxml2: libxml2: denial of service via crafted xml catalogs","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","severity":{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00459,"percentile":0.40009,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2026-01-15T14:20:24Z","modified":"2026-11-06T17:49:14Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libxml2","fixed_in":["2.10.4-10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libxml2","fixed_in":["2.11.5-9"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libxml2","fixed_in":["2.10.4-r7"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"libxml2","fixed_in":["2.13.9-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libxml2","fixed_in":["2.13.9-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"libxml2","fixed_in":["2.10.4-r7"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"libxml2","fixed_in":["2.13.9-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","fixed_in":["2.13.9-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3~deb12u6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-2.1+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.15.2+dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Julia","package":"XML2_jll","fixed_in":["2.15.3+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","fixed_in":["2.9.1+dfsg1-3ubuntu4.13+esm11"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+esm12"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.10+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","fixed_in":["2.9.13+dfsg-1ubuntu0.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3ubuntu3.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"libxml2","fixed_in":["2.14.5+dfsg-0.2ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-9"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.10.4-r7"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.8-r0"},{"fixed":"2.13.9-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.13.9-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.10.4-r7"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.8-r0"},{"fixed":"2.13.9-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.13.9-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els12"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els12"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els12"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els12"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els3"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els7"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u6"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1","2.9.14+dfsg-1.3~deb12u2","2.9.14+dfsg-1.3~deb12u3","2.9.14+dfsg-1.3~deb12u4","2.9.14+dfsg-1.3~deb12u5"]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3"}]}],"versions":["2.12.7+dfsg+really2.9.14-2.1","2.12.7+dfsg+really2.9.14-2.1+deb13u1","2.12.7+dfsg+really2.9.14-2.1+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2+dfsg-0.1"}]}],"versions":["2.12.7+dfsg+really2.9.14-2.1","2.13.1+dfsg-0exp1","2.13.3+dfsg-0exp1","2.13.3+dfsg-0exp2","2.14.1+dfsg-0exp1","2.14.2+dfsg-0exp1","2.14.3+dfsg-0exp1","2.14.3+dfsg-0exp2","2.14.3+dfsg-0exp3","2.14.4+dfsg-0exp1","2.14.5+dfsg-0.1","2.14.5+dfsg-0.2","2.14.5+dfsg-0exp1","2.14.5+dfsg-0exp2","2.14.6+dfsg-0.1","2.15.0+dfsg-0.1","2.15.0+dfsg-0.2","2.15.0+dfsg-0.3","2.15.1+dfsg-0.1","2.15.1+dfsg-0.2","2.15.1+dfsg-0.3","2.15.1+dfsg-0.4","2.15.1+dfsg-0.5","2.15.1+dfsg-1","2.15.1+dfsg-2"]},{"source":"osv","ecosystem":"Julia","package":"XML2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.15.3+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-1.9.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-26.oe2203sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.9-12.oe2403sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.9-12.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.9-12.oe2403sp2"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.9-12.oe2403sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-55.oe2003sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxml2-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.2-0.3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.94.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.94.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.94.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.38.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.38.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.38.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.38.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.10-150700.4.11.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.10-150700.4.11.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.10-150700.4.11.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.99.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.99.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.6-slfo.1.1_8.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.6-slfo.1.1_8.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-slfo.1.1_6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.6-12.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.6-12.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-8.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm11"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4","2.9.1+dfsg1-3ubuntu4.13+esm5","2.9.1+dfsg1-3ubuntu4.13+esm6","2.9.1+dfsg1-3ubuntu4.13+esm7","2.9.1+dfsg1-3ubuntu4.13+esm8","2.9.1+dfsg1-3ubuntu4.13+esm9","2.9.1+dfsg1-3ubuntu4.13+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm12"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4","2.9.3+dfsg1-1ubuntu0.7+esm5","2.9.3+dfsg1-1ubuntu0.7+esm6","2.9.3+dfsg1-1ubuntu0.7+esm7","2.9.3+dfsg1-1ubuntu0.7+esm8","2.9.3+dfsg1-1ubuntu0.7+esm9","2.9.3+dfsg1-1ubuntu0.7+esm10","2.9.3+dfsg1-1ubuntu0.7+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+esm7"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8","2.9.4+dfsg1-6.1ubuntu1.9","2.9.4+dfsg1-6.1ubuntu1.9+esm1","2.9.4+dfsg1-6.1ubuntu1.9+esm2","2.9.4+dfsg1-6.1ubuntu1.9+esm3","2.9.4+dfsg1-6.1ubuntu1.9+esm4","2.9.4+dfsg1-6.1ubuntu1.9+esm5","2.9.4+dfsg1-6.1ubuntu1.9+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+esm4"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6","2.9.10+dfsg-5ubuntu0.20.04.7","2.9.10+dfsg-5ubuntu0.20.04.8","2.9.10+dfsg-5ubuntu0.20.04.9","2.9.10+dfsg-5ubuntu0.20.04.10","2.9.10+dfsg-5ubuntu0.20.04.10+esm1","2.9.10+dfsg-5ubuntu0.20.04.10+esm2","2.9.10+dfsg-5ubuntu0.20.04.10+esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.11"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4","2.9.13+dfsg-1ubuntu0.5","2.9.13+dfsg-1ubuntu0.6","2.9.13+dfsg-1ubuntu0.7","2.9.13+dfsg-1ubuntu0.8","2.9.13+dfsg-1ubuntu0.9","2.9.13+dfsg-1ubuntu0.10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.7"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3","2.9.14+dfsg-1.3ubuntu3.1","2.9.14+dfsg-1.3ubuntu3.2","2.9.14+dfsg-1.3ubuntu3.3","2.9.14+dfsg-1.3ubuntu3.4","2.9.14+dfsg-1.3ubuntu3.5","2.9.14+dfsg-1.3ubuntu3.6"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.5+dfsg-0.2ubuntu0.1"}]}],"versions":["2.12.7+dfsg+really2.9.14-0.4","2.12.7+dfsg+really2.9.14-0.4ubuntu0.1","2.12.7+dfsg+really2.9.14-1","2.14.3+dfsg-0exp1","2.14.3+dfsg-0exp2","2.14.3+dfsg-0exp3","2.14.4+dfsg-0exp1","2.14.5+dfsg-0exp1","2.14.5+dfsg-0exp2","2.14.5+dfsg-0.1","2.14.5+dfsg-0.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.5-4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.8-160000.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-160000.4.1"}]}],"bundled":5}],"products":[{"vendor":"ibm","product":"aix"},{"vendor":"ibm","product":"vios"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat jboss core services"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"hardened_images"},{"vendor":"redhat","product":"jboss_core_services"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:7519","tags":["vendor-advisory","x_refsource_REDHAT","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0992","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2429975","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019","tags":["Exploit","Third Party Advisory","report","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0992","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-cjqj-7q2q-jx9c"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-0992","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1775649722.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1775731413.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1787063229.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0989","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0990","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0992.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-0992","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0027.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35058","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7974-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1598","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32415","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32414","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6170","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6021","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-49796","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-49795","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-49794","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9714","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-26434","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0990","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0989","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1757","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7519.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372406","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6021","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/926","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372952","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6170","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6170","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/941","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392605","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9714","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9714","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/148","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393475","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-26434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26434","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/5e7874015ef5ed8b2705eb2f7b0960f56f7760ea","tags":["article"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-26434","tags":["article"]},{"url":"https://source.android.com/security/bulletin/android-16","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32414","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/889","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360768","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32415","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32415","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/890","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372373","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-49794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49794","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/931","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-49795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49795","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/932","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-49796","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49796","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/933","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2429933","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0989","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/998","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2429959","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0990","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0992","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2435940","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1757","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/1009","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260568-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1250553","tags":["report"]},{"url":"https://bugzilla.suse.com/1256807","tags":["report"]},{"url":"https://bugzilla.suse.com/1256808","tags":["report"]},{"url":"https://bugzilla.suse.com/1256809","tags":["report"]},{"url":"https://bugzilla.suse.com/1256811","tags":["report"]},{"url":"https://bugzilla.suse.com/1256812","tags":["report"]},{"url":"https://bugzilla.suse.com/1257593","tags":["report"]},{"url":"https://bugzilla.suse.com/1257594","tags":["report"]},{"url":"https://bugzilla.suse.com/1257595","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1757","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260570-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1247850","tags":["report"]},{"url":"https://bugzilla.suse.com/1247858","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8732","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260605-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1256804","tags":["report"]},{"url":"https://bugzilla.suse.com/1256805","tags":["report"]},{"url":"https://bugzilla.suse.com/1256810","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0989","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260606-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260782-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620631-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620647-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620657-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620707-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-0992","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-0992","title":"Libxml2: libxml2: denial of service via crafted xml catalogs","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-01-15T14:20:24.934Z","modified":"2026-11-06T17:49:14.534Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-06T18:59:07.714367Z"}],"euvd":[{"id":"EUVD-2026-2795","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-01-15T14:20:24Z","modified":"2026-11-06T17:49:14Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-06T19:05:53.354277Z"}],"ghsa":[{"id":"GHSA-cjqj-7q2q-jx9c","title":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability...","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-01-15T15:31:21Z","modified":"2026-04-22T12:30:29Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:07:34.663272Z"}],"nvd":[{"id":"CVE-2026-0992","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-01-15T15:15:52.657Z","modified":"2026-11-06T18:17:31.8Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-06T20:01:10.928276Z"}],"osv":[{"id":"BELL-CVE-2026-0992","status":"published","published":"2026-01-16T06:07:18.88107Z","modified":"2026-01-26T09:41:05.538285Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"CVE-2026-0992","title":"Libxml2: libxml2: denial of service via crafted xml catalogs","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-01-15T14:20:24.934Z","modified":"2026-11-08T02:30:17.286874486Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-400"],"updated_at":"2026-11-07T03:07:59.125768Z"},{"id":"DEBIAN-CVE-2026-0992","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-01-15T15:15:52.657Z","modified":"2026-11-07T09:47:32.200046406Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"JLSEC-2026-1239","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-08-10T01:45:29.909Z","modified":"2026-08-10T02:00:04.272108369Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2026-1598","title":"libxml2 security update","description":"This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that \u0026quot;[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all.\u0026quot;(CVE-2025-8732)\n\nA flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested \u0026lt;include\u0026gt; directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.(CVE-2026-0989)\n\nA flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications.(CVE-2026-0990)\n\nA flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u0026lt;nextCatalog\u0026gt; elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.(CVE-2026-0992)","status":"published","published":"2026-03-15T11:10:36Z","modified":"2026-08-18T01:19:38.021000285Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2026:7519","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:11:16Z","modified":"2026-10-15T10:27:00Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-0992","title":"CVE-2026-0992 in rootio-libxml2 - Patched by Root","description":"Root has patched CVE-2026-0992 in the rootio-libxml2 package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-04-29T12:57:28Z","modified":"2026-07-21T14:00:18.31806981Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-0992","title":"CVE-2026-0992 in rootio-libxml2 - Patched by Root","description":"Root has patched CVE-2026-0992 in the rootio-libxml2 package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-04-16T08:15:16Z","modified":"2026-07-21T14:00:18.370474649Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"UBUNTU-CVE-2026-0992","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-01-15T15:15:00Z","modified":"2026-04-22T16:18:15.279011Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:58.519486Z"},{"id":"AZL-74778","title":"CVE-2026-0992 affecting package libxml2 for versions less than 2.10.4-10","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-01-15T15:15:52Z","modified":"2026-04-21T04:38:47.908952Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"AZL-74783","title":"CVE-2026-0992 affecting package libxml2 for versions less than 2.11.5-9","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated \u003cnextCatalog\u003e elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.","status":"published","published":"2026-01-15T15:15:52Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.456773Z"},{"id":"CLSA-2026-1775649722","title":"libxml2: Fix of 6 CVEs","description":"- CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint\n- CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries\n- CVE-2026-0989: add RelaxNG include recursion limit\n- CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI\n- CVE-2026-0992: ignore repeated nextCatalog entries in XML catalog parsing\n- CVE-2026-1757: fix memory leak in xmllint interactive shell","status":"published","published":"2026-04-08T13:30:49Z","modified":"2026-06-01T00:32:21.424502497Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775731413","title":"libxml2: Fix of 8 CVEs","description":"- CVE-2023-45322: fix use-after-free in xmlStaticCopyNodeList when copying DTDs\n- CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint\n- CVE-2025-6170: fix potential buffer overflows in xmllint interactive shell\n- CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries\n- CVE-2026-0989: add RelaxNG include recursion limit\n- CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI\n- CVE-2026-0992: ignore repeated nextCatalog entries in XML catalog parsing\n- CVE-2026-1757: fix memory leak in xmllint interactive shell","status":"published","published":"2026-04-09T10:43:37Z","modified":"2026-06-01T00:32:46.811894925Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1787063229","title":"Fix CVE(s): CVE-2025-8732, CVE-2026-0989, CVE-2026-0990, CVE-2026-0992","description":"   * SECURITY UPDATE: uncontrolled recursion in SGML catalog parsing\n     - debian/patches/CVE-2025-8732.patch: thread a depth counter through\n       xmlParseSGMLCatalog() and xmlExpandCatalog() in catalog.c and bail out\n       past MAX_CATAL_DEPTH, and register expanded catalog filenames in the\n       SGML hash table before recursing so a repeated CATALOG directive is\n       only followed once, to prevent stack exhaustion and exponential\n       re-parsing on self-referencing SGML CATALOG entries. Add test files\n       result/catalogs/recursive, test/catalogs/recursive.script and\n       test/catalogs/recursive.sgml\n     - CVE-2025-8732\n   * SECURITY UPDATE: uncontrolled recursion in the RelaxNG parser via nested\n     schema includes\n     - debian/patches/CVE-2026-0989.patch: add an include depth limit to the\n       RelaxNG parser context in relaxng.c, defaulting to 1000 and overridable\n       via the RNG_INCLUDE_LIMIT environment variable or the new\n       xmlRelaxParserSetIncLImit() entry point in include/libxml/relaxng.h, and\n       make xmlRelaxNGIncludePush() failures propagate. Add coverage in\n       runtest.c and test/relaxng/include/include-limit*.rng\n     - debian/libxml2.symbols: add the new xmlRelaxParserSetIncLImit symbol\n     - CVE-2026-0989\n   * SECURITY UPDATE: uncontrolled recursion in XML catalog URI resolution\n     - debian/patches/CVE-2026-0990.patch: add a MAX_CATAL_DEPTH guard to\n       xmlCatalogListXMLResolveURI() in catalog.c and stop clobbering the\n       catalog entry used for depth bookkeeping while walking the entry list,\n       to prevent stack exhaustion on a self-referencing delegateURI entry\n     - CVE-2026-0990\n   * SECURITY UPDATE: uncontrolled resource consumption via repeated\n     nextCatalog entries\n     - debian/patches/CVE-2026-0992.patch: ignore duplicate nextCatalog\n       entries in xmlParseXMLCatalogNode() in catalog.c, to prevent redundant\n       exponential traversal of catalog chains. Guard the new loop against a\n       NULL entry so a nextCatalog element without a 'catalog' attribute is\n       still skipped with an error instead of crashing\n     - CVE-2026-0992","status":"published","published":"2026-08-18T14:27:22Z","modified":"2026-10-26T09:31:52.918506425Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"MGASA-2026-0027","title":"Updated libxml2 packages fix security vulnerabilities","description":"xmlcatalog xmlParseSGMLCatalog recursion. (CVE-2025-8732)\nUnbounded relaxng include recursion leading to stack overflow.\n(CVE-2026-0989)\nDenial of service via uncontrolled recursion in xml catalog processing.\n(CVE-2026-0990)\nDenial of service via crafted xml catalogs. (CVE-2026-0992)\n","status":"published","published":"2026-01-30T00:39:37Z","modified":"2026-04-16T04:44:19.50398448Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10213-1","title":"libxml2-16-2.14.5-4.1 on GA media","description":"These are all security issues fixed in the libxml2-16-2.14.5-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-17T00:00:00Z","modified":"2026-03-23T04:54:34.926155Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20312-1","title":"Security update for libxml2, libxslt","description":"This update for libxml2, libxslt fixes the following issues:\n\nChanges in libxml2:\n\n- CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in\n  `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811).\n- CVE-2026-0992: excessive resource consumption when processing XML catalogs due to exponential behavior when handling\n  `nextCatalog` elements (bsc#1256809, bsc#1256812).\n- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files\n  (bsc#1247858).\n- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257594, bsc#1257595).\n- CVE-2025-10911: parsing xsl nodes may lead to use-after-free with key data stored cross-RVT (bsc#1250553)\n","status":"published","published":"2026-03-04T10:51:24Z","modified":"2026-03-05T21:15:10.380704Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:0568-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811)\n- CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812)\n- CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595)\n- CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553)\n  ","status":"published","published":"2026-02-17T12:26:27Z","modified":"2026-03-23T04:52:21.420654Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0570-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811)\n- CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812)\n- CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595)\n- CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553)\n- CVE-2025-8732: Fixed an infinite recursion in catalog parsing functions when processing malformed SGML catalog files. (bsc#1247858)\n  ","status":"published","published":"2026-02-17T16:38:51Z","modified":"2026-02-18T15:47:08.091063Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0605-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811)\n- CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812)\n- CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595)\n- CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553)\n- CVE-2025-8732: Fixed an infinite recursion in catalog parsing functions when processing malformed SGML catalog files. (bsc#1247858)\n- CVE-2026-0989: Fixe a call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth. (bsc#1256805, bsc#1256810)\n","status":"published","published":"2026-02-24T11:19:20Z","modified":"2026-03-23T04:52:23.488836Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0606-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811)\n- CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812)\n- CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595)\n- CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553)\n- CVE-2026-0989: Fixe a call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth. (bsc#1256805, bsc#1256810)\n","status":"published","published":"2026-02-24T11:19:39Z","modified":"2026-03-23T04:52:23.547661Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0782-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811)\n- CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812)\n- CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595)\n- CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553)\n  ","status":"published","published":"2026-03-03T13:35:15Z","modified":"2026-03-04T22:17:00.854583Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:20631-1","title":"Security update for libxml2, libxslt","description":"This update for libxml2, libxslt fixes the following issues:\n\nChanges in libxml2:\n\n- CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in\n  `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811).\n- CVE-2026-0992: excessive resource consumption when processing XML catalogs due to exponential behavior when handling\n  `nextCatalog` elements (bsc#1256809, bsc#1256812).\n- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files\n  (bsc#1247858).\n- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257594, bsc#1257595).\n- CVE-2025-10911: parsing xsl nodes may lead to use-after-free with key data stored cross-RVT (bsc#1250553)\n","status":"published","published":"2026-03-04T10:51:03Z","modified":"2026-03-23T04:53:05.647345Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20647-1","title":"Security update for libxml2, libxslt","description":"This update for libxml2, libxslt fixes the following issues:\n\nChanges in libxml2:\n\n- CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in\n  `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811).\n- CVE-2026-0992: excessive resource consumption when processing XML catalogs due to exponential behavior when handling\n  `nextCatalog` elements (bsc#1256809, bsc#1256812).\n- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files\n  (bsc#1247858).\n- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257594, bsc#1257595).\n- CVE-2025-10911: parsing xsl nodes may lead to use-after-free with key data stored cross-RVT (bsc#1250553)\n","status":"published","published":"2026-03-04T10:51:03Z","modified":"2026-03-23T04:53:06.17325Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20657-1","title":"Security update for libxslt, libxml2","description":"This update for libxslt, libxml2 fixes the following issues:\n\nlibxml2:\n\n- CVE-2026-0990: call stack overflow leading to application crash \n  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)\n\n- CVE-2026-0992: excessive resource consumption when processing XML \n  catalogs due to exponential behavior when handling `\u003cnextCatalog\u003e` elements (bsc#1256808, bsc#1256809, bsc#1256812)\n\n- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)\n\n- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)\n\n- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)\n\n- CVE-2026-0989: call stack exhaustion leading to application crash \n  due to RelaxNG parser not limiting the recursion depth when \n  resolving `\u003cinclude\u003e` directives (bsc#1256804, bsc#1256805, bsc#1256810)\n\nlibxslt:\n\n- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]\n","status":"published","published":"2026-03-06T11:37:27Z","modified":"2026-03-23T04:53:06.691721Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20707-1","title":"Security update for libxslt, libxml2","description":"This update for libxslt, libxml2 fixes the following issues:\n\nChanges in libxml2:\n\n- CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in\n  `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811).\n- CVE-2026-0992: excessive resource consumption when processing XML catalogs due to exponential behavior when handling\n  `nextCatalog` elements (bsc#1256809, bsc#1256812).\n- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files\n  (bsc#1247858).\n- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257594, bsc#1257595).\n- CVE-2025-10911: parsing xsl nodes may lead to use-after-free with key data stored cross-RVT (bsc#1250553).\n","status":"published","published":"2026-03-06T11:53:41Z","modified":"2026-03-23T04:53:09.014684Z","updated_at":"2026-11-02T15:54:01.953589Z"}]}}