{
  "document": {
    "aggregate_severity": {
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      },
      {
        "category": "details",
        "text": "CVE-2026-0989: limit the RelaxNG include depth\n- CVE-2026-0990: prevent unbounded recursion in catalog URI resolution\n- CVE-2026-0992: ignore repeated nextCatalog entries in XML catalogs\n- CVE-2025-8732: limit SGML catalog include depth, skip repeated CATALOG entries\n- CVE-2025-27113: fix compilation of the explicit child axis in patterns",
        "title": "Details"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028",
        "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1791458028.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-10-08T11:15:13Z",
      "generator": {
        "date": "2026-10-08T11:15:13Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CLSA-2026:1791458028",
      "initial_release_date": "2026-10-08T11:15:13Z",
      "revision_history": [
        {
          "date": "2026-10-08T11:15:13Z",
          "number": "1",
          "summary": "Initial version"
        }
      ],
      "status": "final",
      "version": "1"
    },
    "title": "libxml2: Fix of 5 CVEs"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "AlmaLinux 9.8",
                "product": {
                  "name": "AlmaLinux 9.8",
                  "product_id": "AlmaLinux-9.8",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "AlmaLinux"
          }
        ],
        "category": "vendor",
        "name": "AlmaLinux OS Foundation"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Rocky Linux 9.8",
                "product": {
                  "name": "Rocky Linux 9.8",
                  "product_id": "Rocky Linux-9.8",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Rocky Linux"
          }
        ],
        "category": "vendor",
        "name": "Rocky Linux"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                "product": {
                  "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                  "product_id": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/python3-libxml2@2.9.13-14.el9_8.5.tuxcare.els1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                "product": {
                  "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                  "product_id": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/libxml2-static@2.9.13-14.el9_8.5.tuxcare.els1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                "product": {
                  "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                  "product_id": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/libxml2@2.9.13-14.el9_8.5.tuxcare.els1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                "product": {
                  "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                  "product_id": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/libxml2-devel@2.9.13-14.el9_8.5.tuxcare.els1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                "product": {
                  "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                  "product_id": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/python3-libxml2@2.9.13-14.el9_8.5.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                "product": {
                  "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                  "product_id": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/libxml2-static@2.9.13-14.el9_8.5.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                "product": {
                  "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                  "product_id": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/libxml2@2.9.13-14.el9_8.5.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                "product": {
                  "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                  "product_id": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/libxml2-devel@2.9.13-14.el9_8.5.tuxcare.els1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                "product": {
                  "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                  "product_id": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/python3-libxml2@2.9.13-14.el9_8.5.tuxcare.els1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                "product": {
                  "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                  "product_id": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/libxml2-static@2.9.13-14.el9_8.5.tuxcare.els1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                "product": {
                  "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                  "product_id": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/libxml2@2.9.13-14.el9_8.5.tuxcare.els1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                "product": {
                  "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                  "product_id": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/libxml2-devel@2.9.13-14.el9_8.5.tuxcare.els1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64"
        },
        "product_reference": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        },
        "product_reference": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686"
        },
        "product_reference": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        },
        "product_reference": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64"
        },
        "product_reference": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686"
        },
        "product_reference": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64"
        },
        "product_reference": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        },
        "product_reference": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686"
        },
        "product_reference": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64"
        },
        "product_reference": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686"
        },
        "product_reference": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8",
          "product_id": "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        },
        "product_reference": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64"
        },
        "product_reference": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        },
        "product_reference": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686"
        },
        "product_reference": "python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        },
        "product_reference": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64"
        },
        "product_reference": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686"
        },
        "product_reference": "libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64"
        },
        "product_reference": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        },
        "product_reference": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686"
        },
        "product_reference": "libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64"
        },
        "product_reference": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686"
        },
        "product_reference": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
        "relates_to_product_reference": "Rocky Linux-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8",
          "product_id": "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        },
        "product_reference": "libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
        "relates_to_product_reference": "Rocky Linux-9.8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-0990",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0990"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7519",
          "url": "https://access.redhat.com/errata/RHSA-2026:7519"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-0990",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0990"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2429959",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429959"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018"
        }
      ],
      "release_date": "2026-01-15T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T11:13:50.270923Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028",
          "product_ids": [
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-0992",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0992"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7519",
          "url": "https://access.redhat.com/errata/RHSA-2026:7519"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-0992",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0992"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2429975",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429975"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019"
        }
      ],
      "release_date": "2026-01-15T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T11:13:50.270923Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028",
          "product_ids": [
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2026-0989",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "notes": [
        {
          "category": "description",
          "text": "A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0989"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7519",
          "url": "https://access.redhat.com/errata/RHSA-2026:7519"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-0989",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0989"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2429933",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429933"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/998",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/998"
        }
      ],
      "release_date": "2026-01-15T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T11:13:50.270923Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028",
          "product_ids": [
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2025-8732",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that \"[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all.\"",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8732"
        },
        {
          "category": "external",
          "summary": "https://drive.google.com/file/d/1woIeYVcSQB_NwfEhaVnX6MedpWJ_nqWl/view?usp=drive_link",
          "url": "https://drive.google.com/file/d/1woIeYVcSQB_NwfEhaVnX6MedpWJ_nqWl/view?usp=drive_link"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/958",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/958"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/958#note_2505853",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/958#note_2505853"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?ctiid.319228",
          "url": "https://vuldb.com/?ctiid.319228"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?id.319228",
          "url": "https://vuldb.com/?id.319228"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/?submit.622285",
          "url": "https://vuldb.com/?submit.622285"
        },
        {
          "category": "external",
          "summary": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html"
        }
      ],
      "release_date": "2025-08-08T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T11:13:50.270923Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028",
          "product_ids": [
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2025-27113",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "description",
          "text": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
          "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-27113"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/861",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/861"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/fulldisclosure/2025/Apr/10",
          "url": "http://seclists.org/fulldisclosure/2025/Apr/10"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/fulldisclosure/2025/Apr/11",
          "url": "http://seclists.org/fulldisclosure/2025/Apr/11"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/fulldisclosure/2025/Apr/12",
          "url": "http://seclists.org/fulldisclosure/2025/Apr/12"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/fulldisclosure/2025/Apr/13",
          "url": "http://seclists.org/fulldisclosure/2025/Apr/13"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/fulldisclosure/2025/Apr/4",
          "url": "http://seclists.org/fulldisclosure/2025/Apr/4"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/fulldisclosure/2025/Apr/5",
          "url": "http://seclists.org/fulldisclosure/2025/Apr/5"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/fulldisclosure/2025/Apr/8",
          "url": "http://seclists.org/fulldisclosure/2025/Apr/8"
        },
        {
          "category": "external",
          "summary": "http://seclists.org/fulldisclosure/2025/Apr/9",
          "url": "http://seclists.org/fulldisclosure/2025/Apr/9"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html"
        },
        {
          "category": "external",
          "summary": "https://security.netapp.com/advisory/ntap-20250306-0004/",
          "url": "https://security.netapp.com/advisory/ntap-20250306-0004/"
        }
      ],
      "release_date": "2025-02-18T23:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-08T11:13:50.270923Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028",
          "product_ids": [
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "AlmaLinux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-devel-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:libxml2-static-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.aarch64",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.i686",
            "Rocky Linux-9.8:python3-libxml2-0:2.9.13-14.el9_8.5.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791458028"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    }
  ]
}