openSUSE libxml2 Moderate Threat Resource Exceeded Fix 2026-0570

This update for libxml2 fixes the following issues: * CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) * CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812) * CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595) * CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553) * CVE-2025-8732: Fixed an infinite recursion in catalog parsing functions when processing malformed SGML catalog files. (bsc#1247858)

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-570=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-570=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-570=1

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-570=1

zypper in -t patch openSUSE-SLE-15.6-2026-570=1

* SUSE Linux Enterprise Micro 5.5

zypper in -t patch SUSE-SLE-Micro-5.5-2026-570=1

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libxml2-tools-debuginfo-2.10.3-150500.5.38.1 * python3-libxml2-debuginfo-2.10.3-150500.5.38.1 * libxml2-2-debuginfo-2.10.3-150500.5.38.1 * python311-libxml2-debuginfo-2.10.3-150500.5.38.1 * python3-libxml2-2.10.3-150500.5.38.1 * libxml2-devel-2.10.3-150500.5.38.1 * libxml2-debugsource-2.10.3-150500.5.38.1 * python311-libxml2-2.10.3-150500.5.38.1 * libxml2-tools-2.10.3-150500.5.38.1 * libxml2-python-debugsource-2.10.3-150500.5.38.1 * libxml2-2-2.10.3-150500.5.38.1 * openSUSE Leap 15.5 (x86_64) * libxml2-2-32bit-debuginfo-2.10.3-150500.5.38.1 * libxml2-devel-32bit-2.10.3-150500.5.38.1 * libxml2-2-32bit-2.10.3-150500.5.38.1 * openSUSE Leap 15.5 (noarch) * libxml2-doc-2.10.3-150500.5.38.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libxml2-devel-64bit-2.10.3-150500.5.38.1 * libxml2-2-64bit-2.10.3-150500.5.38.1 * Read the Full Advisory

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)

* libxml2-tools-debuginfo-2.10.3-150500.5.38.1

* python3-libxml2-debuginfo-2.10.3-150500.5.38.1

* libxml2-2-debuginfo-2.10.3-150500.5.38.1

* python311-libxml2-debuginfo-2.10.3-150500.5.38.1

* python3-libxml2-2.10.3-150500.5.38.1

* libxml2-devel-2.10.3-150500.5.38.1

* libxml2-debugsource-2.10.3-150500.5.38.1

* python311-libxml2-2.10.3-150500.5.38.1

* libxml2-tools-2.10.3-150500.5.38.1

* libxml2-python-debugsource-2.10.3-150500.5.38.1

* libxml2-2-2.10.3-150500.5.38.1

* openSUSE Leap 15.5 (x86_64)

* libxml2-2-32bit-debuginfo-2.10.3-150500.5.38.1

* libxml2-devel-32bit-2.10.3-150500.5.38.1

* libxml2-2-32bit-2.10.3-150500.5.38.1

* openSUSE Leap 15.5 (noarch)

* libxml2-doc-2.10.3-150500.5.38.1

* openSUSE Leap 15.5 (aarch64_ilp32)

* libxml2-devel-64bit-2.10.3-150500.5.38.1

* libxml2-2-64bit-2.10.3-150500.5.38.1

* bsc#1247850 * bsc#1247858 * bsc#1250553 * bsc#1256807 * bsc#1256808 * bsc#1256809 * bsc#1256811 * bsc#1256812 * bsc#1257593 * bsc#1257594 * bsc#1257595 ## References: * * * * * * * * * * * * * * * * Read the Full Advisory

*

*

*

*

*

*

*

*

*

*

*

*

*

*

*