The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle Httpserver | — | Apply patch 37677581 to Oracle HTTP Server 12.2.1.4.0.Apply patch 37658370 to Oracle HTTP Server 14.1.2.0.0. | Sep 30, 2026 | Dec 23, 2024 |
| Oracle_linux | — | Upgrade libxml2Upgrade libxml2-staticUpgrade python3-libxml2Upgrade libxml2-devel | Jul 10, 2025 | Dec 23, 2024 |
| Redhat_linux | — | — | Jul 9, 2025 | Dec 23, 2024 |
| Suse | — | Upgrade qt6-webenginewidgets-develUpgrade libQt6WebEngineQuick6Upgrade libQt6WebEngineCore6Upgrade qt6-webenginewidgets-private-develUpgrade libQt6WebEngineWidgets6Upgrade qt6-webengineUpgrade libQt6Pdf6Upgrade qt6-webenginequick-develUpgrade qt6-webengine-docs-htmlUpgrade qt6-pdfquick-private-develUpgrade qt6-webengine-examplesUpgrade qt6-pdf-private-develUpgrade qt6-webenginequick-private-develUpgrade qt6-pdfquick-develUpgrade libxml2-toolsUpgrade qt6-webenginecore-private-develUpgrade libQt6PdfQuick6Upgrade libQt6PdfWidgets6Upgrade libxml2-2Upgrade libxml2-develUpgrade libxml2-docUpgrade python313-libxml2Upgrade qt6-pdf-importsUpgrade qt6-pdf-develUpgrade libxml2-2-32bitUpgrade qt6-pdfwidgets-private-develUpgrade qt6-webenginecore-develUpgrade python3-libxml2Upgrade qt6-webengine-importsUpgrade qt6-webengine-docs-qchUpgrade qt6-pdfwidgets-devel | Dec 5, 2025 | Feb 3, 2025 |
| Ubuntu | — | Upgrade libxml2 | Jan 17, 2025 | Dec 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 23, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub