libxml2 - security update

Fixed packages 1

Vulnerabilities 10

• High 8.1
  CVE-2022-49043

  xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux
  Jan 26, 2025
• High 7.8
  CVE-2024-56171

  libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleI…

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 18, 2025
• High 7.8
  CVE-2025-24928

  libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To…

  xmlsoft libxml2 qt6-qtwebengine libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 18, 2025
• High 7.5
  CVE-2024-25062

  An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD…

  qt6-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 4, 2024
• High 7.5
  CVE-2024-34459

  An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages wit…

  libxml2 libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine
  May 13, 2024
• Medium 5.6
  CVE-2025-32414

  In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bind…

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 8, 2025
• Low 2.9
  CVE-2025-27113

  libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 18, 2025
• Low 2.9
  CVE-2025-32415

  In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer u…

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 17, 2025
• Unscored —
  CVE-2023-39615

  Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libx…

  libxml2 Debian
  Aug 29, 2023
• Unscored —
  CVE-2023-45322

  libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in…

  libxml2 libxml2 libxml2 Debian Azure Linux Wolfi
  Oct 6, 2023