{"id":"CLSA-2025-1753729667","summary":"Fix CVE(s): CVE-2025-49794, CVE-2025-49796","details":"   * SECURITY UPDATE: memory vulnerabilities in schematron\n     - debian/patches/CVE-2025-49794_CVE-2025-49796.patch: fix memory safety\n       issues in xmlSchematronReportOutput when parsing XPath elements and\n       memory corruption issue triggered by processing sch:name elements\n       in input XML file\n     - CVE-2025-49794\n     - CVE-2025-49796","modified":"2026-06-04T09:46:48.199764857Z","published":"2025-07-28T19:07:52Z","upstream":["CVE-2025-49794","CVE-2025-49796"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1753729667.html"}],"affected":[{"package":{"name":"libxml2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libxml2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1753729667.json"}},{"package":{"name":"libxml2-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libxml2-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1753729667.json"}},{"package":{"name":"libxml2-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libxml2-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1753729667.json"}},{"package":{"name":"libxml2-utils","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libxml2-utils?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1753729667.json"}},{"package":{"name":"python-libxml2","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/python-libxml2?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1753729667.json"}}],"schema_version":"1.7.5"}