Back Linuxsecurity Mageia 9: libxml2 Critical DoS Vulnerabilities MGASA-2025
Description: Heap use after free (UAF) leads to Denial of service (DoS). (CVE-2025-49794) Null pointer dereference leads to Denial of service (DoS). (CVE-2025-49795) Type confusion leads to Denial of service (DoS). (CVE-2025-49796) Integer Overflow Leading to Buffer Overflow in xmlBuildQName(). (CVE-2025-6021) Stack-based Buffer Overflow in xmllint Shell. (CVE-2025-6170) Type confusion in xmlNode.psvi between stylesheet and source nodes. (CVE-2025-7424) Heap-use-after-free in xmlFreeID caused by `atype` corruption. (CVE-2025-7425)
Description: Heap use after free (UAF) leads to Denial of service (DoS). (CVE-2025-49794) Null pointer dereference leads to Denial of service (DoS). (CVE-2025-49795) Type confusion leads to Denial of service (DoS). (CVE-2025-49796) Integer Overflow Leading to Buffer Overflow in xmlBuildQName(). (CVE-2025-6021) Stack-based Buffer Overflow in xmllint Shell. (CVE-2025-6170) Type confusion in xmlNode.psvi between stylesheet and source nodes. (CVE-2025-7424) Heap-use-after-free in xmlFreeID caused by `atype` corruption. (CVE-2025-7425)
- - - - - - - - - -
-
-
-
-
-
-
-
-
-
-
MGASA-2025-0269 - Updated libxml2 & libxslt packages fix security vulnerabilities
MGASA-2025-0269 - Updated libxml2 & libxslt packages fix security vulnerabilities
- 9/core/libxml2-2.10.4-1.8.mga9 - 9/core/libxslt-1.1.38-1.2.mga9
- 9/core/libxml2-2.10.4-1.8.mga9
- 9/core/libxslt-1.1.38-1.2.mga9
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
