CVE catalog

CVE-2025-8732

libxml2 vulnerabilities

Severity: Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Published: Aug 8, 2025, 4:32:06 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.22% · Oct 25, 2026

A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that "[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all."

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libxml2	sid	`2.15.4+dfsg-1`	fixed
Debian	libxml2	forky	`2.15.4+dfsg-1`	fixed
Debian	libxml2	trixie	`2.12.7+dfsg+really2.9.14-2.1+deb13u3`	fixed
Debian	libxml2	trixie-security	`2.12.7+dfsg+really2.9.14-2.1+deb13u1`	vulnerable
Debian	libxml2	bookworm	`2.9.14+dfsg-1.3~deb12u6`	fixed
Debian	libxml2	bookworm-security	`2.9.14+dfsg-1.3~deb12u4`	vulnerable
Ubuntu	libxml2	noble	`2.9.14+dfsg-1.3~deb12u6`	fixed
Ubuntu	libxml2	noble	`2.9.14+dfsg-1.3ubuntu3.7`	fixed
Ubuntu	libxml2-dev	noble	`2.9.14+dfsg-1.3ubuntu3.7`	fixed
Ubuntu	libxml2-doc	noble	`2.9.14+dfsg-1.3ubuntu3.7`	fixed
Ubuntu	libxml2-utils	noble	`2.9.14+dfsg-1.3ubuntu3.7`	fixed
Ubuntu	python3-libxml2	noble	`2.9.14+dfsg-1.3ubuntu3.7`	fixed
Ubuntu	libxml2	pro	`2.9.4+dfsg1-7ubuntu3`	vulnerable
Ubuntu	libxml2	pro	`2.9.4+dfsg1-7ubuntu5`	vulnerable
Ubuntu	libxml2	pro	`2.9.4+dfsg1-8ubuntu1`	vulnerable
Ubuntu	libxml2	pro	`2.9.4+dfsg1-8ubuntu2`	vulnerable
Ubuntu	libxml2	pro	`2.9.4+dfsg1-8ubuntu3`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-1ubuntu3`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-4build1`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.1`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.2`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.3`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.4`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.5`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.6`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.7`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.8`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.9`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm1`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm2`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm3`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm4`	fixed
Ubuntu	libxml2	22.04	`2.9.12+dfsg-4`	vulnerable
Ubuntu	libxml2	22.04	`2.9.12+dfsg-5`	vulnerable
Ubuntu	libxml2	22.04	`2.9.12+dfsg-6`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1build1`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.1`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.2`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.3`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.4`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.5`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.6`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.7`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.8`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.9`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.10`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.11`	fixed
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3build1`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3build2`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3build3`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu1`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu2`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.1`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.2`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.3`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.4`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.5`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.6`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.7`	fixed
Ubuntu	libxml2	25.10	`2.12.7+dfsg+really2.9.14-0.4`	vulnerable
Ubuntu	libxml2	25.10	`2.12.7+dfsg+really2.9.14-0.4ubuntu0.1`	vulnerable
Ubuntu	libxml2	25.10	`2.12.7+dfsg+really2.9.14-1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.3+dfsg-0exp1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.3+dfsg-0exp2`	vulnerable
Ubuntu	libxml2	25.10	`2.14.3+dfsg-0exp3`	vulnerable
Ubuntu	libxml2	25.10	`2.14.4+dfsg-0exp1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0exp1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0exp2`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0.1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0.2`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0.2ubuntu0.1`	fixed
Ubuntu	libxml2	pro	`2.9.4+dfsg1-7ubuntu3`	vulnerable
Ubuntu	libxml2	pro	`2.9.4+dfsg1-7ubuntu5`	vulnerable
Ubuntu	libxml2	pro	`2.9.4+dfsg1-8ubuntu1`	vulnerable
Ubuntu	libxml2	pro	`2.9.4+dfsg1-8ubuntu2`	vulnerable
Ubuntu	libxml2	pro	`2.9.4+dfsg1-8ubuntu3`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-1ubuntu3`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-4build1`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.1`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.2`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.3`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.4`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.5`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.6`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.7`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.8`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.9`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm1`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm2`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm3`	vulnerable
Ubuntu	libxml2	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm4`	fixed
Ubuntu	libxml2	22.04	`2.9.12+dfsg-4`	vulnerable
Ubuntu	libxml2	22.04	`2.9.12+dfsg-5`	vulnerable
Ubuntu	libxml2	22.04	`2.9.12+dfsg-6`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1build1`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.1`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.2`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.3`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.4`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.5`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.6`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.7`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.8`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.9`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.10`	vulnerable
Ubuntu	libxml2	22.04	`2.9.13+dfsg-1ubuntu0.11`	fixed
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3build1`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3build2`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3build3`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu1`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu2`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.1`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.2`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.3`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.4`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.5`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.6`	vulnerable
Ubuntu	libxml2	24.04	`2.9.14+dfsg-1.3ubuntu3.7`	fixed
Ubuntu	libxml2	25.10	`2.12.7+dfsg+really2.9.14-0.4`	vulnerable
Ubuntu	libxml2	25.10	`2.12.7+dfsg+really2.9.14-0.4ubuntu0.1`	vulnerable
Ubuntu	libxml2	25.10	`2.12.7+dfsg+really2.9.14-1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.3+dfsg-0exp1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.3+dfsg-0exp2`	vulnerable
Ubuntu	libxml2	25.10	`2.14.3+dfsg-0exp3`	vulnerable
Ubuntu	libxml2	25.10	`2.14.4+dfsg-0exp1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0exp1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0exp2`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0.1`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0.2`	vulnerable
Ubuntu	libxml2	25.10	`2.14.5+dfsg-0.2ubuntu0.1`	fixed
Opensuse	libxml2	tumbleweed	`2.14.5-4.1`	fixed
Suse	libxml2	linux enterprise server ltss extended security 12 sp5	`2.9.4-46.93.1`	fixed
Suse	python-libxml2	linux enterprise server ltss extended security 12 sp5	`2.9.4-46.93.1`	fixed
Suse	libxml2	linux enterprise micro 5.2	`2.9.7-150000.3.88.1`	fixed
Suse	python-libxml2-python	linux enterprise micro 5.2	`2.9.7-150000.3.88.1`	fixed
Opensuse	python-libxml2-python	leap 15.6	`2.9.7-150000.3.88.1`	fixed
Suse	libxml2	linux enterprise micro 5.3	`2.9.14-150400.5.50.1`	fixed
Suse	libxml2-python	linux enterprise micro 5.3	`2.9.14-150400.5.50.1`	fixed
Suse	libxml2	linux enterprise micro 5.4	`2.9.14-150400.5.50.1`	fixed
Suse	libxml2-python	linux enterprise micro 5.4	`2.9.14-150400.5.50.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libxml2	source	sid	`2.15.2+dfsg-0.1`	unimportant	Not reported	Not reported
Debian	libxml2	source	forky	`2.15.2+dfsg-0.1`	unimportant	Not reported	Not reported
Debian	libxml2	source	trixie	`2.12.7+dfsg+really2.9.14-2.1+deb13u3`	not yet assigned	Not reported	Not reported
Debian	libxml2	source	bookworm	`2.9.14+dfsg-1.3~deb12u6`	not yet assigned	Not reported	Not reported
Ubuntu	libxml2	deb	noble	`2.9.14+dfsg-1.3~deb12u6`	Not reported	Not reported	Not reported
Ubuntu	libxml2	deb	noble	`2.9.14+dfsg-1.3ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	libxml2-dev	deb	noble	`2.9.14+dfsg-1.3ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	libxml2-doc	deb	noble	`2.9.14+dfsg-1.3ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	libxml2-utils	deb	noble	`2.9.14+dfsg-1.3ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	python3-libxml2	deb	noble	`2.9.14+dfsg-1.3ubuntu3.7`	Not reported	Not reported	Not reported
Ubuntu	libxml2	deb	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm4`	Not reported	USN-7974-1	Not reported
Ubuntu	libxml2	deb	22.04	`2.9.13+dfsg-1ubuntu0.11`	Not reported	USN-7974-1	Not reported
Ubuntu	libxml2	deb	24.04	`2.9.14+dfsg-1.3ubuntu3.7`	Not reported	USN-7974-1	Not reported
Ubuntu	libxml2	deb	25.10	`2.14.5+dfsg-0.2ubuntu0.1`	Not reported	USN-7974-1	Not reported
Ubuntu	libxml2	deb	pro	`2.9.10+dfsg-5ubuntu0.20.04.10+esm4`	Not reported	UBUNTU-CVE-2025-8732	Not reported
Ubuntu	libxml2	deb	22.04	`2.9.13+dfsg-1ubuntu0.11`	Not reported	UBUNTU-CVE-2025-8732	Not reported
Ubuntu	libxml2	deb	24.04	`2.9.14+dfsg-1.3ubuntu3.7`	Not reported	UBUNTU-CVE-2025-8732	Not reported
Ubuntu	libxml2	deb	25.10	`2.14.5+dfsg-0.2ubuntu0.1`	Not reported	UBUNTU-CVE-2025-8732	Not reported
Opensuse	libxml2	rpm	tumbleweed	`2.14.5-4.1`	Not reported	OPENSUSE-SU-2026:10213-1	Not reported
Suse	libxml2	rpm	linux enterprise server ltss extended security 12 sp5	`2.9.4-46.93.1`	Not reported	SUSE-SU-2025:4104-1	Not reported
Suse	python-libxml2	rpm	linux enterprise server ltss extended security 12 sp5	`2.9.4-46.93.1`	Not reported	SUSE-SU-2025:4104-1	Not reported
Suse	libxml2	rpm	linux enterprise micro 5.2	`2.9.7-150000.3.88.1`	Not reported	SUSE-SU-2025:4115-1	Not reported
Suse	python-libxml2-python	rpm	linux enterprise micro 5.2	`2.9.7-150000.3.88.1`	Not reported	SUSE-SU-2025:4115-1	Not reported
Opensuse	python-libxml2-python	rpm	leap 15.6	`2.9.7-150000.3.88.1`	Not reported	SUSE-SU-2025:4115-1	Not reported
Suse	libxml2	rpm	linux enterprise micro 5.3	`2.9.14-150400.5.50.1`	Not reported	SUSE-SU-2025:4116-1	Not reported
Suse	libxml2-python	rpm	linux enterprise micro 5.3	`2.9.14-150400.5.50.1`	Not reported	SUSE-SU-2025:4116-1	Not reported
Suse	libxml2	rpm	linux enterprise micro 5.4	`2.9.14-150400.5.50.1`	Not reported	SUSE-SU-2025:4116-1	Not reported
Suse	libxml2-python	rpm	linux enterprise micro 5.4	`2.9.14-150400.5.50.1`	Not reported	SUSE-SU-2025:4116-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libxml2]Affected
Details (4)
- 2.9.14+dfsg-1.3~deb12u6 · amd64 · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u6 · arm64 · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · amd64 · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · arm64 · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
[libxml2-dev]Affected
Source package: [libxml2]
Details (4)
- 2.9.14+dfsg-1.3~deb12u6 · amd64 · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u6 · arm64 · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · amd64 · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · arm64 · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
[libxml2-doc]Affected
Source package: [libxml2]
Details (4)
- 2.9.14+dfsg-1.3~deb12u6 · all · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u6 · all · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · all · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · all · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
[libxml2-utils]Affected
Source package: [libxml2]
Details (4)
- 2.9.14+dfsg-1.3~deb12u6 · amd64 · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u6 · arm64 · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · amd64 · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · arm64 · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
[python3-libxml2]Affected
Source package: [libxml2]
Details (4)
- 2.9.14+dfsg-1.3~deb12u6 · amd64 · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u6 · arm64 · bookworm
  Fixed · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · amd64 · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12
- 2.9.14+dfsg-1.3~deb12u4 · arm64 · bookworm-security
  Affected · Fixed: 2.9.14+dfsg-1.3~deb12u6
  usn · libxml2 · debian · bookworm; usn · libxml2 · debian · 12

[Debian 13 (Trixie)]

[libxml2]Affected
Details (4)
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · amd64 · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · arm64 · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · amd64 · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · arm64 · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
[libxml2-dev]Affected
Source package: [libxml2]
Details (4)
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · amd64 · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · arm64 · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · amd64 · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · arm64 · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
[libxml2-doc]Affected
Source package: [libxml2]
Details (4)
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · all · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · all · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · all · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · all · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
[libxml2-utils]Affected
Source package: [libxml2]
Details (4)
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · amd64 · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · arm64 · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · amd64 · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · arm64 · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
[python3-libxml2]Affected
Source package: [libxml2]
Details (4)
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · amd64 · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u3 · arm64 · trixie
  Fixed · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · amd64 · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13
- 2.12.7+dfsg+really2.9.14-2.1+deb13u1 · arm64 · trixie-security
  Affected · Fixed: 2.12.7+dfsg+really2.9.14-2.1+deb13u3
  usn · libxml2 · debian · 13

[openSUSE Tumbleweed]

[libxml2-16]Unknown
Source package: [libxml2]
Details (1)
- 2.15.3-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.5-4.1
  Version impact unknown
  usn · libxml2 · opensuse · tumbleweed
[libxml2-16-32bit]Unknown
Source package: [libxml2]
Details (1)
- 2.15.3-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.5-4.1
  Version impact unknown
  usn · libxml2 · opensuse · tumbleweed
[libxml2-devel]Unknown
Source package: [libxml2]
Details (1)
- 2.15.3-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.5-4.1
  Version impact unknown
  usn · libxml2 · opensuse · tumbleweed
[libxml2-devel-32bit]Unknown
Source package: [libxml2]
Details (1)
- 2.15.3-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.5-4.1
  Version impact unknown
  usn · libxml2 · opensuse · tumbleweed
[libxml2-tools]Unknown
Source package: [libxml2]
Details (1)
- 2.15.3-2.2 · x86_64 · tumbleweed
  Unknown · Fixed: 2.14.5-4.1
  Version impact unknown
  usn · libxml2 · opensuse · tumbleweed

Observed: Oct 27, 2026, 12:31:55 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]