Medium DLA-3878-1 2 CVEs

libxml2 - security update

Published Sep 5, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	libxml2	2.9.10+dfsg-6.7+deb11u5

Vulnerabilities 2

Medium 5.3

CVE-2022-2309

NULL Pointer Dereference in lxml/lxml

NULL Pointer Dereference allows attackers to cause a denial of service (or application crash). This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through fo…

lxml lxml/lxml libxml2 libxml2 Debian Ubuntu Azure Linux Alpine PyPI

Jul 5, 2022
Unscored —

CVE-2016-3709

Possible cross-site scripting vulnerability in libxml after commit 960f0e2.

libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Jul 28, 2022