MGASA-2025-0269

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2025-0269.html
Import Source
https://advisories.mageia.org/MGASA-2025-0269.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2025-0269
Related
Published
2025-11-09T07:52:10Z
Modified
2025-11-09T07:04:20Z
Summary
Updated libxml2 & libxslt packages fix security vulnerabilities
Details

Heap use after free (UAF) leads to Denial of service (DoS). (CVE-2025-49794) Null pointer dereference leads to Denial of service (DoS). (CVE-2025-49795) Type confusion leads to Denial of service (DoS). (CVE-2025-49796) Integer Overflow Leading to Buffer Overflow in xmlBuildQName(). (CVE-2025-6021) Stack-based Buffer Overflow in xmllint Shell. (CVE-2025-6170) Type confusion in xmlNode.psvi between stylesheet and source nodes. (CVE-2025-7424) Heap-use-after-free in xmlFreeID caused by atype corruption. (CVE-2025-7425)

References
Credits

Affected packages

Mageia:9 / libxml2

Package

Name
libxml2
Purl
pkg:rpm/mageia/libxml2?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.10.4-1.8.mga9

Ecosystem specific 

{
    "section": "core"
}

Mageia:9 / libxslt

Package

Name
libxslt
Purl
pkg:rpm/mageia/libxslt?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.38-1.2.mga9

Ecosystem specific 

{
    "section": "core"
}