The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libxml2 | Oct 26, 2018 | Apr 4, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 4, 2018 |
| Centos_linux | — | Upgrade libxml2-debuginfoUpgrade libxml2-develUpgrade python3-libxml2-debuginfoUpgrade libxml2-debugsourceUpgrade libxml2Upgrade python3-libxml2 | Apr 29, 2020 | Apr 4, 2018 |
| Debian | — | Upgrade libxml2 | Feb 19, 2019 | Apr 3, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libxml2-develUpgrade libxml2-pythonUpgrade libxml2 | Nov 19, 2019 | Apr 4, 2018 |
| Oracle_linux | — | Upgrade libxml2-develUpgrade python3-libxml2Upgrade libxml2 | Oct 5, 2022 | Apr 3, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 4, 2018 |
| Redhat_linux | — | Upgrade python3-libxml2-debuginfoUpgrade libxml2-debugsourceUpgrade libxml2-develUpgrade libxml2Upgrade libxml2-debuginfoUpgrade python3-libxml2 | Apr 29, 2020 | Apr 4, 2018 |
| Suse | — | Upgrade libxml2-2-32bitUpgrade python2-libxml2-pythonUpgrade python-libxml2Upgrade libxml2-docUpgrade libxml2-devel-32bitUpgrade libxml2-develUpgrade libxml2-2Upgrade libxml2-toolsUpgrade python3-libxml2-python | Oct 10, 2018 | Apr 3, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub