Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

SUSE-SU-2026:0570-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2026:0570-1

SUSE-SU-2026:0570-1

UNKNOWN

Security update for libxml2

Published Feb 17, 2026

Modified 2 weeks ago

Fix available

Details

This update for libxml2 fixes the following issues:

CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in xmlCatalogXMLResolveURI. (bsc#1256807, bsc#1256811)
CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812)
CVE-2026-1757: Fixed a memory leak in the xmllint interactive shell. (bsc#1257594, bsc#1257595)
CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553)
CVE-2025-8732: Fixed an infinite recursion in catalog parsing functions when processing malformed SGML catalog files. (bsc#1247858)

Affected Packages

libxml2

SUSE Linux Enterprise Micro 5.5openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

libxml2-2

SUSE Linux Enterprise Micro 5.5openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

libxml2-python

SUSE Linux Enterprise Micro 5.5openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

libxml2-tools

SUSE Linux Enterprise Micro 5.5openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

python3-libxml2

SUSE Linux Enterprise Micro 5.5openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

libxml2-2-32bit

openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

libxml2-devel

openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

libxml2-devel-32bit

openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

libxml2-doc

openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

python311-libxml2

openSUSE Leap 15.6

Fixed in:

2.10.3-150500.5.38.1

References

https://bugzilla.suse.com/1247850

https://bugzilla.suse.com/1247858

https://bugzilla.suse.com/1250553

https://bugzilla.suse.com/1256807

https://bugzilla.suse.com/1256808

https://bugzilla.suse.com/1256809

https://bugzilla.suse.com/1256811

https://bugzilla.suse.com/1256812

https://bugzilla.suse.com/1257593

https://bugzilla.suse.com/1257594

https://bugzilla.suse.com/1257595

https://www.suse.com/security/cve/CVE-2025-10911

https://www.suse.com/security/cve/CVE-2025-8732

https://www.suse.com/security/cve/CVE-2026-0990

https://www.suse.com/security/cve/CVE-2026-0992

https://www.suse.com/security/cve/CVE-2026-1757

https://www.suse.com/support/update/announcement/2026/suse-su-20260570-1/

Upstream

CVE-2025-10911 CVE-2025-8732 CVE-2026-0990 CVE-2026-0992 CVE-2026-1757

Related

CVE-2025-10911 CVE-2025-8732 CVE-2026-0990 CVE-2026-0992 CVE-2026-1757

Ecosystems

SUSE Linux Enterprise Micro 5.5 openSUSE Leap 15.6

Timeline

PublishedFeb 17, 2026

ModifiedFeb 17, 2026