CLSA-2025-1752747463 libxml2: Fix of CVE-2025-6021

CVE-2025-6021: fix buffer overflow in xmlBuildQName function...

Multiple vulnerabilities in libxml2 affect AIX

IBM SECURITY ADVISORY First Issued: Thu Jul 17 09:41:13 CDT 2025 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/libxml2advisory9.asc Security Bulletin: Multiple vulnerabilities in libxml2 affect AIX...

AIX : Multiple Vulnerabilities (IJ55267)

The version of AIX installed on the remote host is prior to APAR IJ55267. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55267 advisory. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory...

libxml2 xmlRegEpxFromParse Integer Overflow / Heap Buffer Overflow

libxml2 suffers from an integer overflow that leads to a heap buffer overflow in xmlRegEpxFromParse...

AIX : Multiple Vulnerabilities (IJ55269)

The version of AIX installed on the remote host is prior to APAR IJ55269. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55269 advisory. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory...

AIX : Multiple Vulnerabilities (IJ55266)

The version of AIX installed on the remote host is prior to APAR IJ55266. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55266 advisory. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory...

AIX : Multiple Vulnerabilities (IJ55268)

The version of AIX installed on the remote host is prior to APAR IJ55268. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ55268 advisory. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory...

CLSA-2025-1752654590 libxml2: Fix of 3 CVEs

CVE-2025-49794: fix use-after-free issue triggered by processing certain elements in input XML file. - CVE-2025-49796: fix memory corruption issue triggered by processing certain sch:name elements from input XML file - CVE-2025-6021: fix integer overflow in buffer size calculations to prevent...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.9-i586-6slack15.0.txz: Rebuilt. Recompiled with the missing security patches. Thanks to bigbadaboum for spotting this. For more...

Slackware Linux 15.0 libxml2 Multiple Vulnerabilities (SSA:2025-196-02)

The version of libxml2 installed on the remote host is prior to 2.11.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-196-02 advisory. New libxml2 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding descripti...

SUSE SLED15: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-devel-32bit / etc (SUSE-SU-2025:02314-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02314-1 advisory. - CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. bsc1244554...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.9-i586-5slack15.0.txz: Rebuilt. This update fixes bugs and the following security issues: schematron: Fix memory safety...

Security update for libxml2

This update for libxml2 fixes the following issues: CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. bsc1244554 CVE-2025-49796: Fixed type confusion which could lead to denial of service. bsc1244557 CVE-2025-49795: Fixed a null pointer dereference which could lea...

SUSE-SU-2025:02314-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. bsc1244554 - CVE-2025-49796: Fixed type confusion which could lead to denial of service. bsc1244557 - CVE-2025-49795: Fixed a null pointer dereference which cou...

Photon OS 4.0: Libxml2 PHSA-2025-4.0-0787

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0787. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Slackware Linux 15.0 / current libxml2 Multiple Vulnerabilities (SSA:2025-196-01)

The version of libxml2 installed on the remote host is prior to 2.11.9 / 2.14.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-196-01 advisory. New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted t...

CentOS 9 : libxml2-2.9.13-10.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libxml2-2.9.13-10.el9 build changelog. - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issu...

FreeBSD : libxml2 -- multiple vulnerabilities (abbc8912-5efa-11f0-ae84-99047d0a6bcc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the abbc8912-5efa-11f0-ae84-99047d0a6bcc advisory. Alan Coopersmith reports: As discussed in https://gitlab.gnome.org/GNOME/libxml2/-/issues/913...

SUSE SLES12: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-doc / etc (SUSE-SU-2025:02294-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02294-1 advisory. - CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. bsc1244554 - CVE-2025-49796: Fixed type confusion which...

SUSE-SU-2025:02294-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. bsc1244554 - CVE-2025-49796: Fixed type confusion which could lead to denial of service. bsc1244557 - CVE-2025-6170: Fixed a stack buffer overflow which could...