libxml2 - security update

Fixed packages 1

Vulnerabilities 7

• High 8.1
  CVE-2022-49043

  xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux
  Jan 26, 2025
• High 7.8
  CVE-2024-56171

  libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleI…

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 18, 2025
• High 7.8
  CVE-2025-24928

  libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To…

  xmlsoft libxml2 qt6-qtwebengine libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 18, 2025
• High 7.5
  CVE-2024-25062

  An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD…

  qt6-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 4, 2024
• Low 2.9
  CVE-2025-27113

  libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 18, 2025
• Unscored —
  CVE-2023-39615

  Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libx…

  libxml2 Debian
  Aug 29, 2023
• Unscored —
  CVE-2023-45322

  libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in…

  libxml2 libxml2 libxml2 Debian Azure Linux Wolfi
  Oct 6, 2023