{"id":"CLSA-2025-1753298604","summary":"Fix CVE(s): CVE-2025-49794, CVE-2025-49796","details":"   * SECURITY UPDATE: memory vulnerabilities in schematron\n     - debian/patches/CVE-2025-49794_CVE-2025-49796.patch: fix memory safety\n       issues in xmlSchematronReportOutput when parsing XPath elements and\n       memory corruption issue triggered by processing sch:name elements\n       in input XML file\n     - CVE-2025-49794\n     - CVE-2025-49796","modified":"2026-06-04T09:47:30.597353715Z","published":"2025-07-23T19:23:29Z","upstream":["CVE-2025-49794","CVE-2025-49796"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2025-1753298604.html"}],"affected":[{"package":{"name":"libxml2","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libxml2?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1753298604.json"}},{"package":{"name":"libxml2-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libxml2-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1753298604.json"}},{"package":{"name":"libxml2-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libxml2-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1753298604.json"}},{"package":{"name":"libxml2-utils","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libxml2-utils?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1753298604.json"}},{"package":{"name":"python-libxml2","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/python-libxml2?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1753298604.json"}},{"package":{"name":"python3-libxml2","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/python3-libxml2?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2025-1753298604.json"}}],"schema_version":"1.7.5"}