Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-8732

Fixed in a distro release EPSS <1%CVSS 3.3

A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that "[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all."

Published 2025-08-08 · CVE record · OSV

Products: Siemens RUGGEDCOM RST2428P

Distro releases

ReleasePackageFixed in
Amazon Linux 2libxml22.9.1-6.amzn2.5.21
Amazon Linux 2libxml2-devel2.9.1-6.amzn2.5.21
Amazon Linux 2libxml2-python2.9.1-6.amzn2.5.21
Amazon Linux 2libxml2-static2.9.1-6.amzn2.5.21
Amazon Linux 2023libxml22.10.4-1.amzn2023.0.15
Amazon Linux 2023libxml2-devel2.10.4-1.amzn2023.0.15
Amazon Linux 2023libxml2-static2.10.4-1.amzn2023.0.15
Amazon Linux 2023python3-libxml22.10.4-1.amzn2023.0.15
Debian 12libxml22.9.14+dfsg-1.3~deb12u6
Debian 13libxml22.12.7+dfsg+really2.9.14-2.1+deb13u3
Debian 14libxml22.15.2+dfsg-0.1
SUSE Linux Enterprise Micro 5.2libxml22.9.7-150000.3.88.1
SUSE Linux Enterprise Micro 5.2python-libxml2-python2.9.7-150000.3.88.1
SUSE Linux Enterprise Micro 5.3libxml22.9.14-150400.5.50.1
SUSE Linux Enterprise Micro 5.3libxml2-python2.9.14-150400.5.50.1
SUSE Linux Enterprise Micro 5.4libxml22.9.14-150400.5.50.1
SUSE Linux Enterprise Micro 5.4libxml2-python2.9.14-150400.5.50.1
SUSE Linux Enterprise Micro 5.5libxml22.10.3-150500.5.38.1
SUSE Linux Enterprise Micro 5.5libxml2-python2.10.3-150500.5.38.1
SUSE Linux Enterprise Module for Basesystem 15 SP7libxml22.12.10-150700.4.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP7libxml2-python2.12.10-150700.4.11.1
SUSE Linux Enterprise Module for Python 3 15 SP7libxml2-python2.12.10-150700.4.11.1
SUSE Linux Enterprise Server 16.0libxml22.13.8-160000.4.1
SUSE Linux Enterprise Server 16.0libxml2-python2.13.8-160000.4.1
SUSE Linux Enterprise Server 16.0libxslt1.1.43-160000.4.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5libxml22.9.4-46.93.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5python-libxml22.9.4-46.93.1
SUSE Linux Enterprise Server for SAP applications 16.0libxml22.13.8-160000.4.1
SUSE Linux Enterprise Server for SAP applications 16.0libxml2-python2.13.8-160000.4.1
SUSE Linux Enterprise Server for SAP applications 16.0libxslt1.1.43-160000.4.1
SUSE Linux Micro 6.0libxml22.11.6-12.1
SUSE Linux Micro 6.0libxml2-python2.11.6-12.1
SUSE Linux Micro 6.0libxslt1.1.38-8.1
SUSE Linux Micro 6.1libxml22.11.6-slfo.1.1_8.1
SUSE Linux Micro 6.1libxml2-python2.11.6-slfo.1.1_8.1
SUSE Linux Micro 6.1libxslt1.1.38-slfo.1.1_6.1
SUSE Linux Micro 6.2libxml22.13.8-160000.4.1
SUSE Linux Micro 6.2libxml2-python2.13.8-160000.4.1
SUSE Linux Micro 6.2libxslt1.1.43-160000.4.1
Ubuntu 22.04 LTSlibxml22.9.13+dfsg-1ubuntu0.11
Ubuntu 24.04 LTSlibxml22.9.14+dfsg-1.3ubuntu3.7
Ubuntu 25.10libxml22.14.5+dfsg-0.2ubuntu0.1
Ubuntu Pro 14.04 LTSlibxml22.9.1+dfsg1-3ubuntu4.13+esm11
Ubuntu Pro 16.04 LTSlibxml22.9.3+dfsg1-1ubuntu0.7+esm12
Ubuntu Pro 18.04 LTSlibxml22.9.4+dfsg1-6.1ubuntu1.9+esm7
Ubuntu Pro 20.04 LTSlibxml22.9.10+dfsg-5ubuntu0.20.04.10+esm4
openSUSE Leap 15.6libxml22.10.3-150500.5.38.1
openSUSE Leap 15.6libxml2-python2.10.3-150500.5.38.1
openSUSE Leap 15.6python-libxml2-python2.9.7-150000.3.88.1
openSUSE Leap 16.0libxml22.13.8-160000.4.1
openSUSE Leap 16.0libxml2-python2.13.8-160000.4.1
openSUSE Leap 16.0libxslt1.1.43-160000.4.1
openSUSE Tumbleweedlibxml22.14.5-4.1