SUSE-SU-2026:0605-1: libxml2-python&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:0605-1 is a vulnerability in libxml2-python&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 24-02-2026
   PublishedVulnerability first disclosed.
2. 23-03-2026
   Last modifiedVulnerability information updated.

Description

Security update for libxml2 This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consumption when processing XML catalogs due to exponential behavior. (bsc#1256809, bsc#1256812) - CVE-2026-1757: Fixed a memory leak in the `xmllint` interactive shell. (bsc#1257594, bsc#1257595) - CVE-2025-10911: Fixed a use-after-free with key data stored cross-RVT. (bsc#1250553) - CVE-2025-8732: Fixed an infinite recursion in catalog parsing functions when processing malformed SGML catalog files. (bsc#1247858) - CVE-2026-0989: Fixe a call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth. (bsc#1256805, bsc#1256810)

No weakness data has been published for this record.