AZL-64092 CVE-2025-49796 affecting package libxml2 for versions less than 2.10.4-8

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined...

AZL-64101 CVE-2025-6021 affecting package libxml2 for versions less than 2.10.4-8

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input...