Search for packages
| purl | pkg:alpm/archlinux/libxml2@2.9.10-5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3kn4-5bk5-7bht
Aliases: CVE-2020-7595 GHSA-7553-jr98-vx47 |
libxml2 2.9.10 has an infinite loop in a certain end-of-file situation Nokogiri has backported the patch for CVE-2020-7595 into its vendored version of libxml2, and released this as v1.10.8 CVE-2020-7595 has not yet been addressed in an upstream libxml2 release, and so Nokogiri versions <= v1.10.7 are vulnerable. |
Affected by 0 other vulnerabilities. |
|
VCID-w2vx-75ad-cqc4
Aliases: CVE-2020-24977 |
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e. |
Affected by 0 other vulnerabilities. |
|
VCID-xpfw-8p6z-jucb
Aliases: CVE-2019-20388 |
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-31T11:38:10.408347+00:00 | Arch Linux Importer | Affected by | VCID-xpfw-8p6z-jucb | https://security.archlinux.org/AVG-1263 | 37.0.0 |
| 2025-07-31T11:38:10.379265+00:00 | Arch Linux Importer | Affected by | VCID-w2vx-75ad-cqc4 | https://security.archlinux.org/AVG-1263 | 37.0.0 |
| 2025-07-31T11:38:10.349457+00:00 | Arch Linux Importer | Affected by | VCID-3kn4-5bk5-7bht | https://security.archlinux.org/AVG-1263 | 37.0.0 |