Updated libxml2 & libxslt packages fix security vulnerabilities

🗓️ 09 Nov 2025 07:52:10Reported by Gentoo FoundationType

mageia🔗 advisories.mageia.org👁 22 Views

Updated libxml2 and libxslt fix DoS from heap use after free, null dereference, and type confusion.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in libxml2	22 Sep 202607:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	18 Dec 202501:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in libxml2 affect AIX/VIOS	17 Jul 202516:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	3 Mar 202600:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	18 Aug 202609:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability has addressed Multiple Vulnerabilities within Instana Agent container image	16 Sep 202509:57	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to a use-after-free vulnerability due to the libxml2 package (CVE-2025-49794)	2 Sep 202514:33	–	ibm
IBM Security Bulletins	Security Bulletin: Buffer overflow, uncontrolled recursion, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	29 Sep 202516:06	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	31 Aug 202610:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	7 Aug 202508:11	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	9	noarch	libxml2	2.10.4-1.8.mga9	libxml2-2.10.4-1.8.mga9.noarch.rpm
Mageia	9	noarch	libxslt	1.1.38-1.2.mga9	libxslt-1.1.38-1.2.mga9.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2025/06/16/6
openwall	www.openwall.com/lists/oss-security/2025/07/11/2

09 Nov 2025 07:52Current

7High risk

Vulners AI Score7

CVSS 3.17.5 - 9.1

EPSS0.01558

SSVC

libxml2 libxslt heap after free null dereference type confusion denial of service memory vulnerability