Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-27113

Fixed in a distro release EPSS 1%CVSS 2.9

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

Published 2025-02-18 · CVE record · OSV

Products: xmlsoft libxml2

Distro releases

ReleasePackageFixed in
Alpine 3.18libxml22.11.8-r2
Alpine 3.19libxml22.11.8-r2
Alpine 3.20libxml22.12.7-r2
Alpine 3.21libxml22.13.4-r5
Alpine 3.22libxml22.13.6-r0
Alpine 3.23libxml22.13.6-r0
Alpine 3.24libxml22.13.6-r0
Amazon Linux 2libxml22.9.1-6.amzn2.5.16
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.5.16
Amazon Linux 2libxml2-python2.9.1-6.amzn2.5.16
Amazon Linux 2libxml2-static2.9.1-6.amzn2.5.16
Amazon Linux 2023libxml22.10.4-1.amzn2023.0.9
Amazon Linux 2023libxml2-devel2.10.4-1.amzn2023.0.9
Amazon Linux 2023libxml2-static2.10.4-1.amzn2023.0.9
Amazon Linux 2023python3-libxml22.10.4-1.amzn2023.0.9
Chainguardopenjdk-11-openj9-default-policy0.53.0-r0
Chainguardopenjdk-17-openj9-default-policy0.53.0-r0
Chainguardopenjdk-21-openj9-default-policy0.53.0-r0
Chainguardopenjdk-25-openj90.59.0-r1
Chainguardopenjdk-25-openj9-dbg0.59.0-r1
Chainguardopenjdk-25-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-25-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-25-openj9-jmods0.59.0-r1
Chainguardopenjdk-25-openj9-jre0.59.0-r1
Chainguardopenjdk-26-openj90.59.0-r1
Chainguardopenjdk-26-openj9-dbg0.59.0-r1
Chainguardopenjdk-26-openj9-default-jdk0.59.0-r1
Chainguardopenjdk-26-openj9-default-jvm0.59.0-r1
Chainguardopenjdk-26-openj9-jmods0.59.0-r1
Chainguardopenjdk-26-openj9-jre0.59.0-r1
Chainguardopenjdk-7-jreno fix
Chainguardopenjdk-8-openj9-dbg0.53.0-r1
Debian 11libxml22.9.10+dfsg-6.7+deb11u6
Debian 12libxml22.9.14+dfsg-1.3~deb12u2
Debian 13libxml22.12.7+dfsg+really2.9.14-0.4
Debian 14libxml22.12.7+dfsg+really2.9.14-0.4
SUSE Enterprise Storage 7.1libxml22.9.7-150000.3.76.1
SUSE Enterprise Storage 7.1python-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSlibxml22.9.7-150000.3.76.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml22.9.14-150400.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSlibxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml22.9.14-150400.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSlibxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibxml22.10.3-150500.5.23.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSlibxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibxml22.10.3-150500.5.23.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSlibxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Micro 5.1libxml22.9.7-150000.3.76.1
SUSE Linux Enterprise Micro 5.2libxml22.9.7-150000.3.76.1
SUSE Linux Enterprise Micro 5.2python-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise Micro 5.3libxml22.9.14-150400.5.38.1
SUSE Linux Enterprise Micro 5.3libxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise Micro 5.4libxml22.9.14-150400.5.38.1
SUSE Linux Enterprise Micro 5.4libxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise Micro 5.5libxml22.10.3-150500.5.23.1
SUSE Linux Enterprise Micro 5.5libxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libxml22.10.3-150500.5.23.1
SUSE Linux Enterprise Module for Basesystem 15 SP6libxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Module for Python 3 15 SP6libxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Server 12 SP5-LTSSlibxml22.9.4-46.81.1
SUSE Linux Enterprise Server 12 SP5-LTSSpython-libxml22.9.4-46.81.1
SUSE Linux Enterprise Server 15 SP3-LTSSlibxml22.9.7-150000.3.76.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibxml22.9.14-150400.5.38.1
SUSE Linux Enterprise Server 15 SP4-LTSSlibxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibxml22.10.3-150500.5.23.1
SUSE Linux Enterprise Server 15 SP5-LTSSlibxml2-python2.10.3-150500.5.23.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5libxml22.9.4-46.81.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5python-libxml22.9.4-46.81.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3libxml22.9.7-150000.3.76.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python-libxml2-python2.9.7-150000.3.76.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libxml22.9.14-150400.5.38.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4libxml2-python2.9.14-150400.5.38.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libxml22.10.3-150500.5.23.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5libxml2-python2.10.3-150500.5.23.1
SUSE Linux Micro 6.0libxml22.11.6-5.1
SUSE Linux Micro 6.1libxml22.11.6-slfo.1.1_2.1
SUSE Manager Proxy 4.3libxml22.9.14-150400.5.38.1
SUSE Manager Proxy 4.3libxml2-python2.9.14-150400.5.38.1
SUSE Manager Server 4.3libxml22.9.14-150400.5.38.1
SUSE Manager Server 4.3libxml2-python2.9.14-150400.5.38.1
Ubuntu 20.04 LTSlibxml22.9.10+dfsg-5ubuntu0.20.04.9
Ubuntu 22.04 LTSlibxml22.9.13+dfsg-1ubuntu0.6
Ubuntu 24.04 LTSlibxml22.9.14+dfsg-1.3ubuntu3.2
Ubuntu Pro 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.13+esm7
Ubuntu Pro 16.04 LTSlibxml22.9.3+dfsg1-1ubuntu0.7+esm7
Ubuntu Pro 18.04 LTSlibxml22.9.4+dfsg1-6.1ubuntu1.9+esm2
Wolfiopenjdk-7-jreno fix
openSUSE Leap 15.6libxml22.10.3-150500.5.23.1
openSUSE Leap 15.6libxml2-python2.10.3-150500.5.23.1
openSUSE Leap 15.6python-libxml2-python2.9.7-150000.3.76.1
openSUSE Tumbleweedlibxml22.13.6-1.1