SUSE-SU-2026:0570-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20260570-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0570-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:0570-1
- Upstream
- Related
- Published
- 2026-02-17T16:38:51Z
- Modified
- 2026-02-18T15:47:08.091063Z
- Summary
- Security update for libxml2
- Details
-
This update for libxml2 fixes the following issues:
- CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in
xmlCatalogXMLResolveURI. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812)
- CVE-2026-1757: Fixed a memory leak in the
xmllintinteractive shell. (bsc#1257594, bsc#1257595) - CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553)
- CVE-2025-8732: Fixed an infinite recursion in catalog parsing functions when processing malformed SGML catalog files. (bsc#1247858)
- CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20260570-1/
- https://bugzilla.suse.com/1247850
- https://bugzilla.suse.com/1247858
- https://bugzilla.suse.com/1250553
- https://bugzilla.suse.com/1256807
- https://bugzilla.suse.com/1256808
- https://bugzilla.suse.com/1256809
- https://bugzilla.suse.com/1256811
- https://bugzilla.suse.com/1256812
- https://bugzilla.suse.com/1257593
- https://bugzilla.suse.com/1257594
- https://bugzilla.suse.com/1257595
- https://www.suse.com/security/cve/CVE-2025-10911
- https://www.suse.com/security/cve/CVE-2025-8732
- https://www.suse.com/security/cve/CVE-2026-0990
- https://www.suse.com/security/cve/CVE-2026-0992
- https://www.suse.com/security/cve/CVE-2026-1757
Affected packages
SUSE:Linux Enterprise Micro 5.5 / libxml2
Package
- Name
- libxml2
- Purl
- pkg:rpm/suse/libxml2&distro=SUSE%20Linux%20Enterprise%20Micro%205.5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.10.3-150500.5.38.1
SUSE:Linux Enterprise Micro 5.5 / libxml2-python
Package
- Name
- libxml2-python
- Purl
- pkg:rpm/suse/libxml2-python&distro=SUSE%20Linux%20Enterprise%20Micro%205.5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.10.3-150500.5.38.1
openSUSE:Leap 15.6 / libxml2
Package
- Name
- libxml2
- Purl
- pkg:rpm/opensuse/libxml2&distro=openSUSE%20Leap%2015.6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.10.3-150500.5.38.1
Ecosystem specific
{
"binaries": [
{
"libxml2-devel-32bit": "2.10.3-150500.5.38.1",
"python3-libxml2": "2.10.3-150500.5.38.1",
"libxml2-2": "2.10.3-150500.5.38.1",
"libxml2-2-32bit": "2.10.3-150500.5.38.1",
"libxml2-devel": "2.10.3-150500.5.38.1",
"libxml2-doc": "2.10.3-150500.5.38.1",
"libxml2-tools": "2.10.3-150500.5.38.1",
"python311-libxml2": "2.10.3-150500.5.38.1"
}
]
}
openSUSE:Leap 15.6 / libxml2-python
Package
- Name
- libxml2-python
- Purl
- pkg:rpm/opensuse/libxml2-python&distro=openSUSE%20Leap%2015.6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.10.3-150500.5.38.1
Ecosystem specific
{
"binaries": [
{
"libxml2-devel-32bit": "2.10.3-150500.5.38.1",
"python3-libxml2": "2.10.3-150500.5.38.1",
"libxml2-2": "2.10.3-150500.5.38.1",
"libxml2-2-32bit": "2.10.3-150500.5.38.1",
"libxml2-devel": "2.10.3-150500.5.38.1",
"libxml2-doc": "2.10.3-150500.5.38.1",
"libxml2-tools": "2.10.3-150500.5.38.1",
"python311-libxml2": "2.10.3-150500.5.38.1"
}
]
}