Medium ELSA-2025-13789 1 CVE

Moderate: libxml2 security update (Oracle Linux 7)

Published Sep 8, 2025 · Updated Sep 8, 2025

Ecosystem: Oracle Linux

Summary

[2.9.1-6.0.11.6]
- Fix CVE-2025-32415: Fix heap buffer overflow [Orabug: 38310750]

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 7	libxml2	0:2.9.1-6.0.11.el7_9.6
Oracle Linux · 7	libxml2-devel	0:2.9.1-6.0.11.el7_9.6
Oracle Linux · 7	libxml2-python	0:2.9.1-6.0.11.el7_9.6
Oracle Linux · 7	libxml2-static	0:2.9.1-6.0.11.el7_9.6

Vulnerabilities 1

Low 2.9

CVE-2025-32415

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer u…

xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi

Apr 17, 2025