CVE-2020-7595 — libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation

Description

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	libxml2	2.9.10+dfsg-2.1	—
Debian 13	libxml2	2.9.10+dfsg-2.1	—
Debian 12	libxml2	2.9.10+dfsg-2.1	—
Debian 9	libxml2	2.9.4+dfsg1-2.2+deb9u3	DLA-2369-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 18.04 LTS	libxml2	2.9.4+dfsg1-6.1ubuntu1.3	USN-4274-1
Ubuntu 16.04 LTS	libxml2	2.9.3+dfsg1-1ubuntu0.7	USN-4274-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 14.04 LTS	libxml2	2.9.1+dfsg1-3ubuntu4.13+esm1	USN-4274-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 8	libxml2 +2	2.9.7-8.el8	RHSA-2020:4479
RHEL 7	libxml2 +3	2.9.1-6.el7.5	RHSA-2020:3996

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat JBoss Core Services 1	jbcs-httpd24-curl +2	7.64.1-36.jbcs.el6	RHSA-2020:2644
Red Hat JBoss Core Services 1	jbcs-httpd24-httpd +6	2.4.37-57.jbcs.el6	RHSA-2020:2644
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_cluster-native	1.3.14-4.Final_redhat_2.jbcs.el6	RHSA-2020:2644
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_http2	1.15.7-3.jbcs.el6	RHSA-2020:2644
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_jk +2	1.2.48-4.redhat_1.jbcs.el6	RHSA-2020:2644
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_md	1:2.0.8-24.jbcs.el6	RHSA-2020:2644
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_security	2.9.2-51.GA.jbcs.el6	RHSA-2020:2644
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_ssl +1	1:2.4.37-57.jbcs.el6	RHSA-2020:2644
Red Hat JBoss Core Services 1	jbcs-httpd24-nghttp2 +1	1.39.2-25.jbcs.el6	RHSA-2020:2644
Red Hat JBoss Core Services 1	jbcs-httpd24-openssl-pkcs11	0.4.10-7.jbcs.el7	RHSA-2020:2644

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP1	libxml2	2.9.7-3.19.8	SUSE-SU-2020:1299-1
SLES 15 SP1	python-libxml2-python	2.9.7-3.19.10	SUSE-SU-2020:1299-1
SLES 12 SP5	libxml2 +1	2.9.4-46.34.1	SUSE-SU-2020:2609-1
SLES 11 SP4	libxml2 +1	2.7.6-0.77.36.1	SUSE-SU-2021:14729-1
SLES 2	python-libxml2-python	2.9.7-3.19.10	SUSE-SU-2020:1299-1

Show 5 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES for SAP 12 SP5	libxml2 +1	2.9.4-46.34.1	SUSE-SU-2020:2609-1
SUSE OpenStack Cloud Crowbar 8	crowbar-core	5.0+git.1582968668.1a55c77c5-3.35.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	crowbar-ha	5.0+git.1574286229.e0364c3-3.29.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	crowbar-openstack	5.0+git.1582911795.5081ef1da-4.34.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	crowbar-ui	1.2.0+git.1575896697.a01a3a08-3.15.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	keepalived	2.0.19-3.6.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	mariadb	10.2.31-4.17.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-cinder	11.2.3~dev23-3.24.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-cinder-doc	11.2.3~dev23-3.24.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-dashboard	12.0.5~dev2-3.23.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-dashboard-theme-SUSE	2017.2+git.1573629528.6b21fa5-7.14.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-heat	9.0.8~dev22-3.27.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-heat-doc	9.0.8~dev22-3.27.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-heat-templates	0.0.0+git.1560033670.e3b5a52-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-horizon-plugin-designate-ui	5.0.3~dev2-3.9.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-horizon-plugin-neutron-lbaas-ui	3.0.3~dev5-3.14.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-ironic	9.1.8~dev8-3.24.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-ironic-doc	9.1.8~dev8-3.24.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-keystone	12.0.4~dev5-5.30.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-keystone-doc	12.0.4~dev5-5.30.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-monasca-agent	2.2.5~dev5-3.15.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-neutron	11.0.9~dev60-3.27.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-neutron-doc	11.0.9~dev60-3.27.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-neutron-gbp	7.3.1~dev72-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-neutron-vsphere	2.0.1~dev133-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-nova	16.1.9~dev49-3.32.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-nova-doc	16.1.9~dev49-3.32.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-octavia	1.0.6~dev3-4.21.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-octavia-amphora-image	0.1.2-3.9.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-resource-agents	1.0+git.1569436425.8b9c49f-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-sahara	7.0.5~dev4-3.12.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-sahara-doc	7.0.5~dev4-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	openstack-trove +1	8.0.2~dev2-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-congressclient	1.8.1-3.3.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-designateclient	2.7.1-3.3.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-freezegun	0.3.9-1.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-ironic-lib	2.10.2-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-networking-cisco	6.1.1~dev65-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-osc-lib	1.7.1-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-oslo.context	2.17.2-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-oslo.rootwrap	5.9.3-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-oslo.serialization	2.20.3-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-stevedore +1	1.25.2-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	python-taskflow	2.14.2-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	rubygem-crowbar-client	3.9.1-3.9.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud Crowbar 8	rubygem-puma	2.16.0-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-cinder	8.0+git.1579279939.ee7da88-3.39.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-cobbler	8.0+git.1575037115.0326803-3.41.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-designate	8.0+git.1573597788.15b7984-3.17.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-extensions-example	8.0+git.1534266307.db1ec28-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-extensions-nsx	8.0+git.1567529036.a41a037-3.6.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-glance	8.0+git.1571846045.ab9e3ea-3.20.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-heat	8.0+git.1571777596.14dce6a-3.15.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-input-model	8.0+git.1582147997.b9ed134-3.36.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-ironic	8.0+git.1571845225.006843d-3.9.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-keystone	8.0+git.1573147067.09e3ea0-3.27.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-logging	8.0+git.1572452293.e65d714-3.21.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-monasca	8.0+git.1572527728.9b34bdf-3.21.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-monasca-transform	8.0+git.1571845965.97714fb-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-mq	8.0+git.1581024906.fbf0be3-3.16.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-neutron	8.0+git.1573050365.ff6fa06-3.36.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-nova	8.0+git.1571846125.584d988-3.38.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-octavia	8.0+git.1575642049.1f321d0-3.23.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-osconfig	8.0+git.1581015942.2d21e63-3.42.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	ardana-tempest	8.0+git.1579261264.7dd213a-3.30.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	keepalived	2.0.19-3.6.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	mariadb	10.2.31-4.17.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-cinder	11.2.3~dev23-3.24.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-cinder-doc	11.2.3~dev23-3.24.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-dashboard	12.0.5~dev2-3.23.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-dashboard-theme-SUSE	2017.2+git.1573629528.6b21fa5-7.14.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-heat	9.0.8~dev22-3.27.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-heat-doc	9.0.8~dev22-3.27.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-heat-templates	0.0.0+git.1560033670.e3b5a52-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-horizon-plugin-designate-ui	5.0.3~dev2-3.9.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-horizon-plugin-neutron-lbaas-ui	3.0.3~dev5-3.14.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-ironic	9.1.8~dev8-3.24.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-ironic-doc	9.1.8~dev8-3.24.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-keystone	12.0.4~dev5-5.30.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-keystone-doc	12.0.4~dev5-5.30.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-monasca-agent	2.2.5~dev5-3.15.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-neutron	11.0.9~dev60-3.27.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-neutron-doc	11.0.9~dev60-3.27.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-neutron-gbp	7.3.1~dev72-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-neutron-vsphere	2.0.1~dev133-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-nova	16.1.9~dev49-3.32.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-nova-doc	16.1.9~dev49-3.32.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-octavia	1.0.6~dev3-4.21.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-octavia-amphora-image	0.1.2-3.9.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-resource-agents	1.0+git.1569436425.8b9c49f-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-sahara	7.0.5~dev4-3.12.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-sahara-doc	7.0.5~dev4-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	openstack-trove +1	8.0.2~dev2-3.12.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-cinderlm	0.0.2+git.1571845893.27f0b7b-3.9.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-congressclient	1.8.1-3.3.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-designateclient	2.7.1-3.3.4	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-freezegun	0.3.9-1.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-ironic-lib	2.10.2-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-networking-cisco	6.1.1~dev65-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-osc-lib	1.7.1-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-oslo.context	2.17.2-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-oslo.rootwrap	5.9.3-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-oslo.serialization	2.20.3-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-stevedore +1	1.25.2-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	python-taskflow	2.14.2-3.3.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-aodh	5.1.1~dev7-12.22.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-barbican	5.0.2~dev3-12.23.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-ceilometer	9.0.8~dev7-12.20.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-cinder	11.2.3~dev23-14.23.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-designate	5.0.3~dev7-12.21.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-freezer	5.0.0.0~xrc2~dev2-10.18.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-glance	15.0.3~dev3-12.21.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-heat	9.0.8~dev22-12.23.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-horizon	12.0.5~dev2-14.28.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-ironic	9.1.8~dev8-12.23.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-keystone	12.0.4~dev5-11.24.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-magnum	5.0.2_5.0.2_5.0.2~dev31-11.22.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-manila	5.1.1~dev2-12.25.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-monasca	2.2.2~dev1-11.20.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-monasca-ceilometer	1.5.1_1.5.1_1.5.1~dev3-8.18.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-murano	4.0.2~dev2-12.18.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-neutron	11.0.9~dev60-13.26.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-nova	16.1.9~dev49-11.24.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-octavia	1.0.6~dev3-12.23.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-sahara	7.0.5~dev4-11.22.2	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-swift	2.15.2_2.15.2_2.15.2~dev32-11.16.3	SUSE-SU-2020:0640-1
SUSE OpenStack Cloud 8	venv-openstack-trove	8.0.2~dev2-11.22.2	SUSE-SU-2020:0640-1
SUSE Linux Enterprise Point of Sale 11 SP3	libxml2 +1	2.7.6-0.77.36.1	SUSE-SU-2021:14729-1
SUSE HPE Helion OpenStack 8	ardana-cinder	8.0+git.1579279939.ee7da88-3.39.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-cobbler	8.0+git.1575037115.0326803-3.41.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-designate	8.0+git.1573597788.15b7984-3.17.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-extensions-example	8.0+git.1534266307.db1ec28-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-extensions-nsx	8.0+git.1567529036.a41a037-3.6.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-glance	8.0+git.1571846045.ab9e3ea-3.20.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-heat	8.0+git.1571777596.14dce6a-3.15.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-input-model	8.0+git.1582147997.b9ed134-3.36.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-ironic	8.0+git.1571845225.006843d-3.9.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-keystone	8.0+git.1573147067.09e3ea0-3.27.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-logging	8.0+git.1572452293.e65d714-3.21.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-monasca	8.0+git.1572527728.9b34bdf-3.21.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-monasca-transform	8.0+git.1571845965.97714fb-3.12.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-mq	8.0+git.1581024906.fbf0be3-3.16.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-neutron	8.0+git.1573050365.ff6fa06-3.36.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-nova	8.0+git.1571846125.584d988-3.38.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-octavia	8.0+git.1575642049.1f321d0-3.23.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-osconfig	8.0+git.1581015942.2d21e63-3.42.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	ardana-tempest	8.0+git.1579261264.7dd213a-3.30.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	keepalived	2.0.19-3.6.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	mariadb	10.2.31-4.17.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-cinder	11.2.3~dev23-3.24.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-cinder-doc	11.2.3~dev23-3.24.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-dashboard	12.0.5~dev2-3.23.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-heat	9.0.8~dev22-3.27.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-heat-doc	9.0.8~dev22-3.27.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-heat-templates	0.0.0+git.1560033670.e3b5a52-3.12.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-horizon-plugin-designate-ui	5.0.3~dev2-3.9.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-horizon-plugin-neutron-lbaas-ui	3.0.3~dev5-3.14.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-ironic	9.1.8~dev8-3.24.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-ironic-doc	9.1.8~dev8-3.24.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-keystone	12.0.4~dev5-5.30.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-keystone-doc	12.0.4~dev5-5.30.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-monasca-agent	2.2.5~dev5-3.15.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-neutron	11.0.9~dev60-3.27.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-neutron-doc	11.0.9~dev60-3.27.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-neutron-gbp	7.3.1~dev72-3.12.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-neutron-vsphere	2.0.1~dev133-3.12.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-nova	16.1.9~dev49-3.32.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-nova-doc	16.1.9~dev49-3.32.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-octavia	1.0.6~dev3-4.21.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-octavia-amphora-image	0.1.2-3.9.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-resource-agents	1.0+git.1569436425.8b9c49f-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-sahara	7.0.5~dev4-3.12.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-sahara-doc	7.0.5~dev4-3.12.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	openstack-trove +1	8.0.2~dev2-3.12.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-cinderlm	0.0.2+git.1571845893.27f0b7b-3.9.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-congressclient	1.8.1-3.3.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-designateclient	2.7.1-3.3.4	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-ironic-lib	2.10.2-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-networking-cisco	6.1.1~dev65-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-osc-lib	1.7.1-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-oslo.context	2.17.2-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-oslo.rootwrap	5.9.3-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-oslo.serialization	2.20.3-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-stevedore +1	1.25.2-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	python-taskflow	2.14.2-3.3.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-aodh	5.1.1~dev7-12.22.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-barbican	5.0.2~dev3-12.23.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-ceilometer	9.0.8~dev7-12.20.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-cinder	11.2.3~dev23-14.23.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-designate	5.0.3~dev7-12.21.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-freezer	5.0.0.0~xrc2~dev2-10.18.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-glance	15.0.3~dev3-12.21.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-heat	9.0.8~dev22-12.23.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-horizon-hpe	12.0.5~dev2-14.28.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-ironic	9.1.8~dev8-12.23.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-keystone	12.0.4~dev5-11.24.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-magnum	5.0.2_5.0.2_5.0.2~dev31-11.22.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-manila	5.1.1~dev2-12.25.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-monasca	2.2.2~dev1-11.20.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-monasca-ceilometer	1.5.1_1.5.1_1.5.1~dev3-8.18.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-murano	4.0.2~dev2-12.18.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-neutron	11.0.9~dev60-13.26.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-nova	16.1.9~dev49-11.24.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-octavia	1.0.6~dev3-12.23.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-sahara	7.0.5~dev4-11.22.2	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-swift	2.15.2_2.15.2_2.15.2~dev32-11.16.3	SUSE-SU-2020:0640-1
SUSE HPE Helion OpenStack 8	venv-openstack-trove	8.0.2~dev2-11.22.2	SUSE-SU-2020:0640-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	libxml2	2.9.12-1.2	openSUSE-SU-2024:11016-1
openSUSE Tumbleweed	ruby3.2-rubygem-nokogiri	1.13.9-1.7	openSUSE-SU-2024:13165-1
openSUSE Tumbleweed	rubygem-nokogiri	1.13.3-1.1	openSUSE-SU-2026:10356-1, openSUSE-SU-2025:14697-1, openSUSE-SU-2024:14174-1
openSUSE Leap 15.1	libxml2 +1	2.9.7-lp151.5.9.1	openSUSE-SU-2020:0681-1

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	libxml2	2.9.8-r3	—
Alpine v3.23	libxml2	2.9.8-r3	—
Alpine v3.22	libxml2	2.9.8-r3	—
Alpine v3.21	libxml2	2.9.8-r3	—
Alpine v3.20	libxml2	2.9.8-r3	—

Show 9 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Alpine v3.19	libxml2	2.9.8-r3	—
Alpine v3.18	libxml2	2.9.8-r3	—
Alpine v3.17	libxml2	2.9.8-r3	—
Alpine v3.16	libxml2	2.9.8-r3	—
Alpine v3.15	libxml2	2.9.8-r3	—
Alpine v3.14	libxml2	2.9.8-r3	—
Alpine v3.13	libxml2	2.9.8-r3	—
Alpine v3.12	libxml2	2.9.8-r3	—
Alpine v3.11	libxml2	2.9.8-r2	—

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2	libxml2 +3	2.9.1-6.amzn2.5.1	ALAS2-2020-1534

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 8	libxml2 +2	2.9.7-8.0.1.el8	ELSA-2020-4479
Oracle Linux 7	libxml2 +3	2.9.1-6.0.1.el7.5	ELSA-2020-3996

Affected packages

Ecosystem	Package	Affected	Fixed	Record
RubyGems	nokogiri	< 1.10.8	1.10.8	GHSA-7553-jr98-vx47

Advisories 26

SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
RHSA-2020:4479 Red Hat Security Advisory: libxml2 security update Red Hat Security Advisories (RHSA) · Sep 21, 2026
RHSA-2020:3996 Red Hat Security Advisory: libxml2 security and bug fix update Red Hat Security Advisories (RHSA) · Sep 21, 2026
RHSA-2020:2644 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update Red Hat Security Advisories (RHSA) · Sep 21, 2026
WID-SEC-2025-0227 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
USN-4274-1 libxml2 vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
SUSE-SU-2020:0640-1 Security update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, opens SUSE / openSUSE Security Updates · Mar 23, 2026
openSUSE-SU-2026:10356-1 ruby4.0-rubygem-nokogiri-1.18.9-1.4 on GA media SUSE / openSUSE Security Updates · Mar 14, 2026
DLA-2369-1 libxml2 - security update Debian Security (DSA / DLA) · Mar 9, 2026
openSUSE-SU-2025:14697-1 ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2020:2609-1 Security update for libxml2 SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:11016-1 libxml2-2-2.9.12-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2021:14729-1 Security update for libxml2 SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13165-1 ruby3.2-rubygem-nokogiri-1.13.9-1.7 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2020:1299-1 Security update for libxml2 SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:14174-1 ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:11912-1 ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2020:0681-1 Security update for libxml2 SUSE / openSUSE Security Updates · Feb 4, 2026
ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025
ICSA-21-103-08 Siemens SINEMA Remote Connect Server CISA ICS & IT advisories · May 6, 2025
WID-SEC-2025-0616 libxml2: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Mar 20, 2025
WID-SEC-2023-1614 Tenable Security Nessus Network Monitor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 25, 2023
SSA-292794 SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server Siemens ProductCERT · Apr 13, 2021
ELSA-2020-4479 Moderate: libxml2 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 10, 2020
ALAS2-2020-1534 Moderate: libxml2 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 22, 2020
ELSA-2020-3996 Moderate: libxml2 security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 6, 2020

References

FEDORA-2020-41fe1680f6 vendor-advisory
USN-4274-1 vendor-advisory
FEDORA-2020-0c71c00af4 vendor-advisory
FEDORA-2020-7694e8be73 vendor-advisory
openSUSE-SU-2020:0681 vendor-advisory
https://www.oracle.com/security-alerts/cpujul2020.html
https://security.netapp.com/advisory/ntap-20200702-0005/
https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076
[debian-lts-announce] 20200909 [SECURITY] [DLA 2369-1] libxml2 security update mailing-list
GLSA-202010-04 vendor-advisory
https://www.oracle.com/security-alerts/cpuoct2021.html
https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html

EUVD	v3.1	7.5
OSV:GHSA	v3.1	7.5
CISA-ADP	v3.1	7.5