Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:02355-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:02355-1

UNKNOWN

Security update for libxml2

Published Jul 17, 2025

Modified 6 months ago

Fix available

Details

This update for libxml2 fixes the following issues:

CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. (bsc#1244554)
CVE-2025-49796: Fixed type confusion which could lead to denial of service. (bsc#1244557)
CVE-2025-6170: Fixed a stack buffer overflow which could lead to a crash. (bsc#1244700)
CVE-2025-6021: Fixed an integer overflow in xmlBuildQName() which could lead to stack buffer overflow. (bsc#1244590)

Affected Packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml2-2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml2-2-32bit

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml2-devel

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml2-python

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml2-tools

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpython3-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSpython311-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml2-2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml2-2-32bit

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml2-devel

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml2-python

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml2-tools

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpython3-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSpython311-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.3libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.3libxml2-2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.3libxml2-python

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.3libxml2-tools

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.3python3-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.4libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.4libxml2-2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.4libxml2-python

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.4libxml2-tools

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Micro 5.4python3-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibxml2-2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibxml2-2-32bit

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibxml2-devel

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibxml2-python

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server 15 SP4-LTSSlibxml2-tools

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpython3-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server 15 SP4-LTSSpython311-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libxml2-2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libxml2-2-32bit

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libxml2-devel

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libxml2-python

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4libxml2-tools

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4python3-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4python311-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Proxy 4.3libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Proxy 4.3libxml2-2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Proxy 4.3libxml2-2-32bit

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Proxy 4.3libxml2-devel

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Proxy 4.3libxml2-python

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Proxy 4.3libxml2-tools

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Proxy 4.3python3-libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Server 4.3libxml2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Server 4.3libxml2-2

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Server 4.3libxml2-2-32bit

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Server 4.3libxml2-devel

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Server 4.3libxml2-python

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Server 4.3libxml2-tools

Fixed in:

2.9.14-150400.5.44.1

SUSE:Manager Server 4.3python3-libxml2

Fixed in:

2.9.14-150400.5.44.1

References

REPORThttps://bugzilla.suse.com/1244554 REPORThttps://bugzilla.suse.com/1244557 REPORThttps://bugzilla.suse.com/1244590 REPORThttps://bugzilla.suse.com/1244700 WEBhttps://www.suse.com/security/cve/CVE-2025-49794 WEBhttps://www.suse.com/security/cve/CVE-2025-49796 WEBhttps://www.suse.com/security/cve/CVE-2025-6021 WEBhttps://www.suse.com/security/cve/CVE-2025-6170 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-202502355-1/

Upstream

CVE-2025-49794 CVE-2025-49796 CVE-2025-6021 CVE-2025-6170

Related

CVE-2025-49794 CVE-2025-49796 CVE-2025-6021 CVE-2025-6170

Ecosystems

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Manager Proxy 4.3 SUSE Manager Server 4.3

Timeline

PublishedJul 17, 2025

ModifiedJul 17, 2025