https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:31:07.916687+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:10630 ALSA-2025:10630 — Important: libxml2 security update 2026-10-08T07:31:07.950198+00:00

Affected: AlmaLinux:10: libxml2, AlmaLinux:10: libxml2-devel, AlmaLinux:10: libxml2-static, AlmaLinux:10: python3-libxml2

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794) * libxml: Null pointer dereference leads to Denial of service (DoS) (CVE-2025-49795) * libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796) * libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/cve-2025-49795 CVE-2025-49795 — Libxml: null pointer dereference leads to denial of service (dos) 2026-10-08T07:31:07.950270+00:00

Affected: GNOME libxml2, Red Hat Enterprise Linux 10, Red Hat Hardened Images, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Siemens RUGGEDCOM RST2428P

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.