Linux
libxml2 security updates
Patch Radar has 383 security fixes for libxml2, closing 64 CVEs. The newest security fix is ALAS2023-2026-3341 (2.10.4-1.amzn2023.0.22), released November 7, 2026.
Latest version
n/a
Release date not known
Security fixes
383
On record in Patch Radar
CVEs
64
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| Routine | ALAS2023-2026-3341 | amzn 2023 | 2.10.4-1.amzn2023.0.22 | 1 | Nov 7, 2026 | |
| High | ELSA-2026-80675 | ol 8 | 0:2.9.7-21.el8_10.10 | 1 | Nov 7, 2026 | |
| High | ALSA-2026:80675 | almalinux 8 | 2.9.7-21.el8_10.10 | 1 | Nov 7, 2026 | |
| High | RLSA-2026:80675 | rocky 8 | 0:2.9.7-21.el8_10.10 | 1 | Nov 7, 2026 | |
| High | RHSA-2026:80675 | RHEL 8 | 0:2.9.7-21.el8_10.10 | 1 | Oct 12, 2026 | |
| High | libxml2 2.9.14+dfsg-1.3ubuntu3.10 | Ubuntu 24.04.5 LTS (noble) | 2.9.14+dfsg-1.3ubuntu3.10 | 5 | Oct 9, 2026 | |
| High | libxml2 2.9.13+dfsg-1ubuntu0.14 | Ubuntu 22.04.1 LTS (jammy) | 2.9.13+dfsg-1ubuntu0.14 | 5 | Oct 9, 2026 | |
| High | libxml2 2.9.10+dfsg-5ubuntu0.20.04.10+esm6 | Ubuntu 20.04 LTS (focal) | 2.9.10+dfsg-5ubuntu0.20.04.10+esm6 | 5 | Oct 9, 2026 | |
| High | libxml2 2.9.4+dfsg1-6.1ubuntu1.9+esm9 | Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.9+esm9 | 5 | Oct 9, 2026 | |
| High | ALAS2023-2026-3122 | amzn 2023 | 2.10.4-1.amzn2023.0.21 | 7 | Sep 28, 2026 | |
| High | RLSA-2026:71641 | rocky 8 | 0:2.9.7-21.el8_10.9 | 5 | Sep 26, 2026 | |
| High | RHSA-2026:71585 | RHEL 9 | 0:2.9.13-14.el9_8.5 | 6 | Sep 25, 2026 | |
| High | RLSA-2026:71585 | rocky 9 | 0:2.9.13-14.el9_8.5 | 6 | Sep 25, 2026 | |
| High | RLSA-2026:71586 | rocky 10 | 0:2.12.5-10.el10_2.4 | 6 | Sep 25, 2026 | |
| High | ELSA-2026-71586 | ol 10 | 0:2.12.5-10.el10_2.4 | 6 | Sep 25, 2026 | |
| High | ELSA-2026-71641 | ol 8 | 0:2.9.7-21.el8_10.9 | 5 | Sep 25, 2026 | |
| High | RHSA-2026:71641 | RHEL 8 | 0:2.9.7-21.el8_10.9 | 5 | Sep 24, 2026 | |
| High | ALSA-2026:71585 | almalinux 9 | 2.9.13-14.el9_8.5 | 6 | Sep 24, 2026 | |
| High | ALSA-2026:71586 | almalinux 10 | 2.12.5-10.el10_2.4 | 6 | Sep 24, 2026 | |
| High | ELSA-2026-71585 | ol 9 | 0:2.9.13-14.el9_8.5 | 6 | Sep 24, 2026 | |
| High | ALSA-2026:71641 | almalinux 8 | 2.9.7-21.el8_10.9 | 5 | Sep 24, 2026 | |
| High | RLSA-2026:69655 | rocky 8 | 0:2.9.7-21.el8_10.8 | 1 | Sep 23, 2026 | |
| High | ELSA-2026-69655 | ol 8 | 0:2.9.7-21.el8_10.8 | 1 | Sep 23, 2026 | |
| High | RHSA-2026:69655 | RHEL 8 | 0:2.9.7-21.el8_10.8 | 1 | Sep 22, 2026 | |
| High | libxml2 2.9.13+dfsg-1ubuntu0.13 | Ubuntu 22.04.1 LTS (jammy) | 2.9.13+dfsg-1ubuntu0.13 | 2 | Sep 22, 2026 | |
| High | libxml2 2.9.14+dfsg-1.3ubuntu3.9 | Ubuntu 24.04.5 LTS (noble) | 2.9.14+dfsg-1.3ubuntu3.9 | 2 | Sep 22, 2026 | |
| High | libxml2 2.9.10+dfsg-5ubuntu0.20.04.10+esm5 | Ubuntu 20.04 LTS (focal) | 2.9.10+dfsg-5ubuntu0.20.04.10+esm5 | 2 | Sep 22, 2026 | |
| High | libxml2 2.9.4+dfsg1-6.1ubuntu1.9+esm8 | Ubuntu 18.04.6 LTS (bionic) | 2.9.4+dfsg1-6.1ubuntu1.9+esm8 | 2 | Sep 22, 2026 | |
| High | ALSA-2026:69655 | almalinux 8 | 2.9.7-21.el8_10.8 | 2 | Sep 21, 2026 | |
| Routine | DEBIAN-CVE-2026-76781 | Debian 14 | 2.15.4+dfsg-1 | 1 | Sep 20, 2026 | |
| High | RHSA-2026:61247 | RHEL 9 | 0:2.9.13-14.el9_8.4 | 2 | Sep 13, 2026 | |
| High | RHSA-2026:61248 | RHEL 8 | 0:2.9.7-21.el8_10.7 | 1 | Sep 13, 2026 | |
| High | DEBIAN-CVE-2026-74860 | Debian 14 | 2.15.3+dfsg-1 | 1 | Sep 11, 2026 | |
| High | DEBIAN-CVE-2026-86143 | Debian 14 | 2.15.4+dfsg-1 | 1 | Sep 11, 2026 | |
| High | DEBIAN-CVE-2026-86144 | Debian 14 | 2.15.4+dfsg-1 | 1 | Sep 11, 2026 | |
| High | DEBIAN-CVE-2026-86139 | Debian 14 | 2.15.4+dfsg-1 | 1 | Sep 11, 2026 | |
| High | DEBIAN-CVE-2026-86140 | Debian 14 | 2.15.4+dfsg-1 | 1 | Sep 11, 2026 | |
| High | DEBIAN-CVE-2026-86142 | Debian 14 | 2.15.4+dfsg-1 | 1 | Sep 11, 2026 | |
| High | DEBIAN-CVE-2026-86138 | Debian 14 | 2.15.4+dfsg-1 | 1 | Sep 11, 2026 | |
| Routine | DEBIAN-CVE-2026-86137 | Debian 14 | 2.15.4+dfsg-1 | 1 | Sep 11, 2026 | |
| Routine | DEBIAN-CVE-2026-86141 | Debian 14 | 2.15.4+dfsg-1 | 1 | Sep 11, 2026 | |
| High | ELSA-2026-61247-0 | ol 9 | 0:2.9.13-14.el9_8.4 | 2 | Sep 1, 2026 | |
| High | ELSA-2026-61248-0 | ol 8 | 0:2.9.7-21.el8_10.7 | 1 | Sep 1, 2026 | |
| High | RLSA-2026:61247 | rocky 9 | 0:2.9.13-14.el9_8.4 | 2 | Aug 31, 2026 | |
| High | RLSA-2026:61248 | rocky 8 | 0:2.9.7-21.el8_10.7 | 1 | Aug 31, 2026 | |
| High | ALSA-2026:61247 | almalinux 9 | 2.9.13-14.el9_8.4 | 2 | Aug 31, 2026 | |
| High | ALSA-2026:61248 | almalinux 8 | 2.9.7-21.el8_10.7 | 1 | Aug 31, 2026 | |
| High | RLSA-2026:60394 | rocky 10 | 0:2.12.5-10.el10_2.3 | 1 | Aug 28, 2026 | |
| High | RHSA-2026:89759 | RHEL 10 | 2.12.5-9.el10_0.9 | 7 | Aug 28, 2026 | |
| High | ELSA-2026-60394-0 | ol 10 | 0:2.12.5-10.el10_2.3 | 1 | Aug 27, 2026 | |
| High | ALSA-2026:60394 | almalinux 10 | 2.12.5-10.el10_2.3 | 1 | Aug 26, 2026 | |
| High | ELSA-2026-28234 | ol 10 | 0:2.12.5-10.el10_2.2 | 1 | Jul 21, 2026 | |
| High | ALAS2023-2026-1992 | amzn 2023 | 2.10.4-1.amzn2023.0.20 | 1 | Jul 20, 2026 | |
| Routine | RHSA-2026:39317 | RHEL 9 | 0:2.9.13-14.el9_8.2 | 1 | Jul 18, 2026 | |
| High | SUSE-SU-2026:3097-1 | sles 15.7 | 2.12.10-150700.4.14.1 | 1 | Jul 17, 2026 | |
| High | SUSE-SU-2026:3096-1 | sles 15.6 | 2.10.3-150500.5.41.1 | 1 | Jul 17, 2026 | |
| Routine | ELSA-2026-39304 | ol 10 | 0:2.12.5-10.el10_2.2 | 1 | Jul 16, 2026 | |
| Routine | RLSA-2026:39304 | rocky 10 | 0:2.12.5-10.el10_2.2 | 1 | Jul 15, 2026 | |
| Routine | RLSA-2026:39317 | rocky 9 | 0:2.9.13-14.el9_8.2 | 1 | Jul 15, 2026 | |
| Routine | ALSA-2026:39304 | almalinux 10 | 2.12.5-10.el10_2.2 | 1 | Jul 14, 2026 | |
| Routine | ALSA-2026:39317 | almalinux 9 | 2.9.13-14.el9_8.2 | 1 | Jul 14, 2026 | |
| Routine | ELSA-2026-39317 | ol 9 | 0:2.9.13-14.el9_8.2 | 1 | Jul 14, 2026 | |
| High | SUSE-SU-2026:22636-1 | sles 16.0 | 2.13.8-160000.5.1 | 2 | Jul 13, 2026 | |
| High | OPENSUSE-SU-2026:21317-1 | opensuse-leap 16.0 | 2.13.8-160000.5.1 | 2 | Jul 13, 2026 | |
| Routine | RHSA-2026:36734 | RHEL 8 | 0:2.9.7-21.el8_10.6 | 1 | Jul 9, 2026 | |
| Routine | RLSA-2026:36734 | rocky 8 | 0:2.9.7-21.el8_10.6 | 1 | Jul 9, 2026 | |
| Routine | ALSA-2026:36734 | almalinux 8 | 2.9.7-21.el8_10.6 | 1 | Jul 8, 2026 | |
| Routine | ELSA-2026-36734 | ol 8 | 0:2.9.7-21.el8_10.6 | 1 | Jul 8, 2026 | |
| High | ALAS2023-2026-1911 | amzn 2023 | 2.10.4-1.amzn2023.0.19 | 1 | Jul 6, 2026 | |
| High | DEBIAN-CVE-2026-11979 | Debian 14 | 2.15.4+dfsg-1 | 1 | Jun 29, 2026 | |
| High | libxml2 2.9.14+dfsg-1.3ubuntu3.8 | Ubuntu 24.04.5 LTS (noble) | 2.9.14+dfsg-1.3ubuntu3.8 | 1 | Jun 25, 2026 | |
| High | libxml2 2.9.13+dfsg-1ubuntu0.12 | Ubuntu 22.04.1 LTS (jammy) | 2.9.13+dfsg-1ubuntu0.12 | 1 | Jun 25, 2026 | |
| High | RHSA-2026:28254 | RHEL 9 | 0:2.9.13-14.el9_8.1 | 1 | Jun 24, 2026 | |
| High | RHSA-2026:26354 | RHEL 8 | 0:2.9.7-21.el8_10.5 | 1 | Jun 24, 2026 | |
| High | DEBIAN-CVE-2026-6653 | Debian 14 | 2.14.5+dfsg-0.1 | 1 | Jun 24, 2026 | |
| High | RLSA-2026:28234 | rocky 10 | 0:2.12.5-10.el10_2.1 | 1 | Jun 24, 2026 | |
| High | RLSA-2026:28254 | rocky 9 | 0:2.9.13-14.el9_8.1 | 1 | Jun 24, 2026 | |
| High | ALSA-2026:28234 | almalinux 10 | 2.12.5-10.el10_2.1 | 1 | Jun 23, 2026 | |
| High | ALSA-2026:28254 | almalinux 9 | 2.9.13-14.el9_8.1 | 1 | Jun 23, 2026 | |
| High | ELSA-2026-28254 | ol 9 | 0:2.9.13-14.el9_8.1 | 1 | Jun 23, 2026 | |
| High | RLSA-2026:26354 | rocky 8 | 0:2.9.7-21.el8_10.5 | 1 | Jun 17, 2026 | |
| High | ALSA-2026:26354 | almalinux 8 | 2.9.7-21.el8_10.5 | 1 | Jun 16, 2026 | |
| High | ELSA-2026-26354 | ol 8 | 0:2.9.7-21.el8_10.5 | 1 | Jun 16, 2026 | |
| Routine | RHSA-2026:11349 | RHEL 8 | 0:2.9.7-21.el8_10.4 | 1 | Apr 30, 2026 | |
| Routine | RLSA-2026:11349 | rocky 8 | 0:2.9.7-21.el8_10.4 | 1 | Apr 29, 2026 | |
| Routine | ELSA-2026-11349 | ol 8 | 0:2.9.7-21.el8_10.4 | 1 | Apr 28, 2026 | |
| High | DEBIAN-CVE-2026-6732 | Debian 14 | 2.15.3+dfsg-1 | 1 | Apr 23, 2026 | |
| Routine | OPENSUSE-SU-2026:20312-1 | opensuse-leap 16.0 | 2.13.8-160000.4.1 | 5 | Mar 4, 2026 | |
| Routine | SUSE-SU-2026:20631-1 | sles 16.0 | 2.13.8-160000.4.1 | 5 | Mar 4, 2026 | |
| Routine | ALAS2023-2026-1446 | amzn 2023 | 2.10.4-1.amzn2023.0.18 | 1 | Mar 2, 2026 | |
| Routine | SUSE-SU-2026:0605-1 | sles 15.7 | 2.12.10-150700.4.11.1 | 6 | Feb 24, 2026 | |
| Routine | SUSE-SU-2026:0570-1 | opensuse-leap 15.6 | 2.10.3-150500.5.38.1 | 5 | Feb 17, 2026 | |
| Routine | ALAS2023-2026-1396 | amzn 2023 | 2.10.4-1.amzn2023.0.16 | 2 | Feb 5, 2026 | |
| Routine | ALAS2023-2026-1397 | amzn 2023 | 2.10.4-1.amzn2023.0.17 | 1 | Feb 5, 2026 | |
| Routine | SUSE-SU-2026:0391-1 | opensuse-leap 15.6 | 2.10.3-150500.5.35.1 | 1 | Feb 5, 2026 | |
| Routine | OPENSUSE-SU-2026:20178-1 | opensuse-leap 16.0 | 2.13.8-160000.3.1 | 1 | Feb 5, 2026 | |
| Routine | SUSE-SU-2026:20233-1 | sles 16.0 | 2.13.8-160000.3.1 | 1 | Feb 5, 2026 | |
| Routine | DEBIAN-CVE-2026-1757 | Debian 14 | 2.15.2+dfsg-0.1 | 1 | Feb 2, 2026 | |
| Routine | DEBIAN-CVE-2026-1757 | Debian 12.15 (bookworm) | 2.9.14+dfsg-1.3~deb12u6 | 1 | Feb 2, 2026 | |
| Routine | DEBIAN-CVE-2026-1757 | Debian 13.5 (trixie) | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | 1 | Feb 2, 2026 |
Showing the newest 100 of 383 fixes.
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.