Advisories » MGASA-2025-0139

Updated libxml2 packages fix security vulnerabilities

Publication date: 25 Apr 2025
Modification date: 25 Apr 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-32414 , CVE-2025-32415

Description

[CVE-2025-32414] Buffer overflow when parsing text streams with Python
API
[CVE-2025-32415] Heap-based Buffer Overflow in
xmlSchemaIDCFillNodeTables
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34210
• https://openwall.com/lists/oss-security/2025/04/17/3
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32414
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32415

SRPMS

9/core

• libxml2-2.10.4-1.7.mga9