Поиск уязвимостей

Moderate: libxml2 security update

Moderate: libxml2 security update

An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.

ELSA-2026-22420: libxml2 security update (MODERATE)

ELSA-2026-11349: libxml2 security update (MODERATE)

ELSA-2025-22376: libxml2 security update (MODERATE)

Уязвимость библиотеки Libxml2, связанная с неконтролируемой рекурсией, позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость функции очистки объекта XML библиотеки анализа XML-документов libxml2, позволяющая нарушителю вызвать отказ в обслуживании

Security update for libxml2

Security update for libxml2

Множественные уязвимости libxml2

ALT-PU-2025-13303: package `libxml2` update to version 2.9.12-alt1.p10.5

ALT-PU-2026-19670: package `libxml2` update to version 2.12.10-alt3