Back Linuxsecurity

Mageia 9 libxml2 Critical Security Flaw Denial of Service MGASA-2026

Linuxsecurity •LinuxSecurity Advisories • January 30, 2026

Description: xmlcatalog xmlParseSGMLCatalog recursion. (CVE-2025-8732) Unbounded relaxng include recursion leading to stack overflow. (CVE-2026-0989) Denial of service via uncontrolled recursion in xml catalog processing. (CVE-2026-0990) Denial of service via crafted xml catalogs. (CVE-2026-0992)

- - - - - -

MGASA-2026-0027 - Updated libxml2 packages fix security vulnerabilities

- 9/core/libxml2-2.10.4-1.9.mga9

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mageia 9 libxml2 Critical DoS Vulnerabilities Identified Mageia 9 has been found to have multiple critical vulnerabilities in the libxml2 library, leading to denial of service (DoS) conditions. The issues include unbounded recursion, heap use after free, and various types of buffer overflows, affecting systems that utilize this library. Specific CVEs associated with these vulnerabilities include CVE-2025-8732, CVE-2025-49794, and CVE-2025-6021, among others. 4 sources 60

Extracted Entities

Mageia 9 libxml2 Critical Security Flaw Denial of Service MGASA-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (4)

Platforms (1)