{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libxml2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libxml2 fixes the following issues:\n\n- CVE-2025-6021: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 [bsc#1244580]\n- CVE-2025-6170: stack buffer overflow may lead to a crash [bsc#1244700]\n- CVE-2025-7425: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr [bsc#1246296]\n- CVE-2025-49794: heap use after free (UAF) can lead to Denial of service (DoS) [bsc#1244554]\n- CVE-2025-49795: null pointer dereference may lead to Denial of service (DoS) [bsc#1244555]\n- CVE-2025-49796: type confusion may lead to Denial of service (DoS) [bsc#1244557]\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-236",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20607-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:20607-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520607-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:20607-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-August/041454.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1244554",
        "url": "https://bugzilla.suse.com/1244554"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1244555",
        "url": "https://bugzilla.suse.com/1244555"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1244557",
        "url": "https://bugzilla.suse.com/1244557"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1244580",
        "url": "https://bugzilla.suse.com/1244580"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1244700",
        "url": "https://bugzilla.suse.com/1244700"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1246296",
        "url": "https://bugzilla.suse.com/1246296"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-49794 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-49794/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-49795 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-49795/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-49796 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-49796/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6021 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6021/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-6170 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-6170/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-7425 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-7425/"
      }
    ],
    "title": "Security update for libxml2",
    "tracking": {
      "current_release_date": "2025-08-27T09:46:19Z",
      "generator": {
        "date": "2025-08-27T09:46:19Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:20607-1",
      "initial_release_date": "2025-08-27T09:46:19Z",
      "revision_history": [
        {
          "date": "2025-08-27T09:46:19Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
                "product": {
                  "name": "libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
                  "product_id": "libxml2-2-2.11.6-slfo.1.1_6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
                "product": {
                  "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
                  "product_id": "libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
                "product": {
                  "name": "libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
                  "product_id": "libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
                "product": {
                  "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
                  "product_id": "libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
                "product": {
                  "name": "libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
                  "product_id": "libxml2-2-2.11.6-slfo.1.1_6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
                "product": {
                  "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
                  "product_id": "libxml2-tools-2.11.6-slfo.1.1_6.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
                "product": {
                  "name": "libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
                  "product_id": "libxml2-2-2.11.6-slfo.1.1_6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64",
                "product": {
                  "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64",
                  "product_id": "libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.11.6-slfo.1.1_6.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64"
        },
        "product_reference": "libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le"
        },
        "product_reference": "libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.11.6-slfo.1.1_6.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x"
        },
        "product_reference": "libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-2-2.11.6-slfo.1.1_6.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64"
        },
        "product_reference": "libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64"
        },
        "product_reference": "libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le"
        },
        "product_reference": "libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x"
        },
        "product_reference": "libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
        },
        "product_reference": "libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-49794",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-49794"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the \u003csch:name path=\"...\"/\u003e schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program\u0027s crash using libxml or other possible undefined behaviors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-49794",
          "url": "https://www.suse.com/security/cve/CVE-2025-49794"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244554 for CVE-2025-49794",
          "url": "https://bugzilla.suse.com/1244554"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-27T09:46:19Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-49794"
    },
    {
      "cve": "CVE-2025-49795",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-49795"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-49795",
          "url": "https://www.suse.com/security/cve/CVE-2025-49795"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244555 for CVE-2025-49795",
          "url": "https://bugzilla.suse.com/1244555"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-27T09:46:19Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-49795"
    },
    {
      "cve": "CVE-2025-49796",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-49796"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-49796",
          "url": "https://www.suse.com/security/cve/CVE-2025-49796"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244557 for CVE-2025-49796",
          "url": "https://bugzilla.suse.com/1244557"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-27T09:46:19Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-49796"
    },
    {
      "cve": "CVE-2025-6021",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6021"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libxml2\u0027s xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6021",
          "url": "https://www.suse.com/security/cve/CVE-2025-6021"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244580 for CVE-2025-6021",
          "url": "https://bugzilla.suse.com/1244580"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-27T09:46:19Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-6021"
    },
    {
      "cve": "CVE-2025-6170",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-6170"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-6170",
          "url": "https://www.suse.com/security/cve/CVE-2025-6170"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244700 for CVE-2025-6170",
          "url": "https://bugzilla.suse.com/1244700"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-27T09:46:19Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-6170"
    },
    {
      "cve": "CVE-2025-7425",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-7425"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-7425",
          "url": "https://www.suse.com/security/cve/CVE-2025-7425"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246296 for CVE-2025-7425",
          "url": "https://bugzilla.suse.com/1246296"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-2-2.11.6-slfo.1.1_6.1.x86_64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:libxml2-tools-2.11.6-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-27T09:46:19Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-7425"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "libxml ist ein C Parser und Toolkit, welches f\u00fcr das Gnome Projekt entwickelt wurde.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libxml2 ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren oder nicht n\u00e4her beschriebene Auswirkungen zu erzielen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1312 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1312.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1312 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1312"
      },
      {
        "category": "external",
        "summary": "GNOME Security vom 2025-06-11",
        "url": "https://gitlab.gnome.org/Teams/Releng/security/-/wikis/2025"
      },
      {
        "category": "external",
        "summary": "GNOME GitLab Issue 926 vom 2025-06-11",
        "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/926"
      },
      {
        "category": "external",
        "summary": "GNOME GitLab Issue 931 vom 2025-06-11",
        "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/931"
      },
      {
        "category": "external",
        "summary": "GNOME GitLab Issue 932 vom 2025-06-11",
        "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/932"
      },
      {
        "category": "external",
        "summary": "GNOME GitLab Issue 933 vom 2025-06-11",
        "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/933"
      },
      {
        "category": "external",
        "summary": "Arch Linux Security Advisory ASA-202506-7 vom 2025-06-19",
        "url": "https://security.archlinux.org/ASA-202506-7"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2025-2893 vom 2025-06-24",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2893.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2025-2893 vom 2025-06-30",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2025-2893.html"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory TNS-2025-13 vom 2025-06-30",
        "url": "https://de.tenable.com/security/tns-2025-13"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:10630 vom 2025-07-08",
        "url": "https://access.redhat.com/errata/RHSA-2025:10630"
      },
      {
        "category": "external",
        "summary": "openSUSE Security Update OPENSUSE-SU-2025:15321-1 vom 2025-07-09",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6ENYT3VR7R5DYMOUMVW7VUSFZWAHIP53/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02260-1 vom 2025-07-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021778.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:10698 vom 2025-07-09",
        "url": "https://access.redhat.com/errata/RHSA-2025:10698"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:10699 vom 2025-07-09",
        "url": "https://access.redhat.com/errata/RHSA-2025:10699"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-10630 vom 2025-07-09",
        "url": "https://linux.oracle.com/errata/ELSA-2025-10630.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-10699 vom 2025-07-10",
        "url": "https://linux.oracle.com/errata/ELSA-2025-10699.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-10698 vom 2025-07-10",
        "url": "https://linux.oracle.com/errata/ELSA-2025-10698.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02275-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021788.html"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20250711-0009 vom 2025-07-11",
        "url": "https://security.netapp.com/advisory/NTAP-20250711-0009"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02294-1 vom 2025-07-11",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021799.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02314-1 vom 2025-07-15",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021818.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7239960 vom 2025-07-17",
        "url": "https://www.ibm.com/support/pages/node/7239960"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11386 vom 2025-07-17",
        "url": "https://access.redhat.com/errata/RHSA-2025:11386"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02355-1 vom 2025-07-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021844.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11396 vom 2025-07-18",
        "url": "https://access.redhat.com/errata/RHSA-2025:11396"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11580 vom 2025-07-23",
        "url": "https://access.redhat.com/errata/RHSA-2025:11580"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:11673 vom 2025-07-29",
        "url": "https://access.redhat.com/errata/RHSA-2025:11673"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:12099 vom 2025-07-29",
        "url": "https://access.redhat.com/errata/RHSA-2025:12099"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:12098 vom 2025-07-29",
        "url": "https://access.redhat.com/errata/RHSA-2025:12098"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:12199 vom 2025-07-29",
        "url": "https://access.redhat.com/errata/RHSA-2025:12199"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:12237 vom 2025-07-30",
        "url": "https://access.redhat.com/errata/RHSA-2025:12237"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:12240 vom 2025-07-30",
        "url": "https://access.redhat.com/errata/RHSA-2025:12240"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:12241 vom 2025-07-30",
        "url": "https://access.redhat.com/errata/RHSA-2025:12241"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:12239 vom 2025-07-30",
        "url": "https://access.redhat.com/errata/RHSA-2025:12239"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2025-2938 vom 2025-07-30",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2025-2938.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-12450 vom 2025-08-01",
        "url": "https://linux.oracle.com/errata/ELSA-2025-12450.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-13203 vom 2025-08-07",
        "url": "http://linux.oracle.com/errata/ELSA-2025-13203.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7241565 vom 2025-08-06",
        "url": "https://www.ibm.com/support/pages/node/7241565"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:13335 vom 2025-08-07",
        "url": "https://access.redhat.com/errata/RHSA-2025:13335"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7242015 vom 2025-08-12",
        "url": "https://www.ibm.com/support/pages/node/7242015"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:13336 vom 2025-08-13",
        "url": "https://access.redhat.com/errata/RHSA-2025:13336"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:13325 vom 2025-08-13",
        "url": "https://access.redhat.com/errata/RHSA-2025:13325"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-12240 vom 2025-08-14",
        "url": "https://linux.oracle.com/errata/ELSA-2025-12240.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:13289 vom 2025-08-14",
        "url": "https://access.redhat.com/errata/RHSA-2025:13289"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7694-1 vom 2025-08-20",
        "url": "https://ubuntu.com/security/notices/USN-7694-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:14059 vom 2025-08-28",
        "url": "https://access.redhat.com/errata/RHSA-2025:14059"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:14396 vom 2025-08-28",
        "url": "https://access.redhat.com/errata/RHSA-2025:14396"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20564-1 vom 2025-08-28",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022316.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20607-1 vom 2025-08-29",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022361.html"
      },
      {
        "category": "external",
        "summary": "PDFreactor Release Notes vom 2025-09-05",
        "url": "https://www.pdfreactor.com/pdfreactor-12-3-now-available/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7244160 vom 2025-09-05",
        "url": "https://www.ibm.com/support/pages/node/7244160"
      },
      {
        "category": "external",
        "summary": "Hitachi Cybersecurity Advisory vom 2025-09-09",
        "url": "https://publisher.hitachienergy.com/preview?DocumentID=8DBD000220\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=launch"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7244361 vom 2025-09-09",
        "url": "https://www.ibm.com/support/pages/node/7244361"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:15308 vom 2025-09-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:15308"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:15827 vom 2025-09-15",
        "url": "https://access.redhat.com/errata/RHSA-2025:15827"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:15828 vom 2025-09-15",
        "url": "https://access.redhat.com/errata/RHSA-2025:15828"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:15672 vom 2025-09-18",
        "url": "https://access.redhat.com/errata/RHSA-2025:15672"
      },
      {
        "category": "external",
        "summary": "fluent-package v5.0.8 release vom 2025-10-08",
        "url": "https://www.fluentd.org/blog/fluent-package-v5.0.8-has-been-released"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:18219 vom 2025-10-16",
        "url": "https://access.redhat.com/errata/RHSA-2025:18219"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:18217 vom 2025-10-22",
        "url": "https://access.redhat.com/errata/RHSA-2025:18217"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:18218 vom 2025-10-22",
        "url": "https://access.redhat.com/errata/RHSA-2025:18218"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:15397 vom 2025-10-22",
        "url": "https://access.redhat.com/errata/RHSA-2025:15397"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:18240 vom 2025-10-23",
        "url": "https://access.redhat.com/errata/RHSA-2025:18240"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19020 vom 2025-10-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:19020"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19046 vom 2025-10-29",
        "url": "https://access.redhat.com/errata/RHSA-2025:19046"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19041 vom 2025-10-30",
        "url": "https://access.redhat.com/errata/RHSA-2025:19041"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-404 vom 2025-10-31",
        "url": "https://www.dell.com/support/kbdoc/000385435"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-390 vom 2025-11-05",
        "url": "https://www.dell.com/support/kbdoc/000385230"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX25-018 vom 2025-11-18",
        "url": "https://security.business.xerox.com/wp-content/uploads/2025/11/Xerox-Security-Bulletin-XRX25-018-Xerox-FreeFlow-Print-Server-v7.pdf"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:21913 vom 2025-11-25",
        "url": "https://access.redhat.com/errata/RHSA-2025:21913"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2025.06 vom 2025-11-27",
        "url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2025-06-lantime-firmware-v7-10-004.htm"
      },
      {
        "category": "external",
        "summary": "Tenable Security Advisory TNS-2025-24 vom 2025-12-15",
        "url": "https://de.tenable.com/security/tns-2025-24"
      }
    ],
    "source_lang": "en-US",
    "title": "libxml2: Mehrere Schwachstellen erm\u00f6glichen Denial of Service",
    "tracking": {
      "current_release_date": "2025-12-15T23:00:00.000+00:00",
      "generator": {
        "date": "2025-12-16T09:27:11.361+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1312",
      "initial_release_date": "2025-06-11T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-06-11T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-06-12T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: 2372385"
        },
        {
          "date": "2025-06-19T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Arch Linux aufgenommen"
        },
        {
          "date": "2025-06-24T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2025-06-30T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Amazon und Tenable aufgenommen"
        },
        {
          "date": "2025-07-08T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-07-09T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von openSUSE, SUSE, Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2025-07-10T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-13T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von NetApp und SUSE aufgenommen"
        },
        {
          "date": "2025-07-15T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-17T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von IBM, Red Hat und SUSE aufgenommen"
        },
        {
          "date": "2025-07-20T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-07-22T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-07-28T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-07-29T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-07-30T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2025-07-31T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2025-08-06T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Oracle Linux und IBM aufgenommen"
        },
        {
          "date": "2025-08-07T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-08-11T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-08-12T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-08-13T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
        },
        {
          "date": "2025-08-19T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2025-08-27T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-08-31T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-09-07T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-09-08T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2025-09-09T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-09-11T22:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-09-15T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-09-17T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-07T22:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2025-10-16T22:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-21T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-23T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-27T23:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-28T23:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-29T23:00:00.000+00:00",
          "number": "38",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-30T23:00:00.000+00:00",
          "number": "39",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-11-04T23:00:00.000+00:00",
          "number": "40",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-11-17T23:00:00.000+00:00",
          "number": "41",
          "summary": "Neue Updates von XEROX aufgenommen"
        },
        {
          "date": "2025-11-25T23:00:00.000+00:00",
          "number": "42",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-27T23:00:00.000+00:00",
          "number": "43",
          "summary": "Neue Updates von Meinberg aufgenommen"
        },
        {
          "date": "2025-12-15T23:00:00.000+00:00",
          "number": "44",
          "summary": "Neue Updates von Tenable aufgenommen"
        }
      ],
      "status": "final",
      "version": "44"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell Avamar",
            "product": {
              "name": "Dell Avamar",
              "product_id": "T039664",
              "product_identification_helper": {
                "cpe": "cpe:/a:dell:avamar:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Virtual Edition",
                "product": {
                  "name": "Dell NetWorker Virtual Edition",
                  "product_id": "T048226",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:virtual_edition"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Appliance \u003c5.32.00.18",
                "product": {
                  "name": "Dell Secure Connect Gateway Appliance \u003c5.32.00.18",
                  "product_id": "T048301"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance 5.32.00.18",
                "product": {
                  "name": "Dell Secure Connect Gateway Appliance 5.32.00.18",
                  "product_id": "T048301-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:secure_connect_gateway:appliance__5.32.00.18"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Secure Connect Gateway"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Hitachi Energy RTU500",
            "product": {
              "name": "Hitachi Energy RTU500",
              "product_id": "T027844",
              "product_identification_helper": {
                "cpe": "cpe:/h:abb:rtu500:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Hitachi Energy"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.3",
                "product": {
                  "name": "IBM AIX 7.3",
                  "product_id": "1139691",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.2",
                "product": {
                  "name": "IBM AIX 7.2",
                  "product_id": "434967",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "AIX"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cLTS 12.0.14",
                "product": {
                  "name": "IBM App Connect Enterprise \u003cLTS 12.0.14",
                  "product_id": "T045928"
                }
              },
              {
                "category": "product_version",
                "name": "LTS 12.0.14",
                "product": {
                  "name": "IBM App Connect Enterprise LTS 12.0.14",
                  "product_id": "T045928-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:app_connect_enterprise:lts_12.0.14"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "App Connect Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Operator",
                "product": {
                  "name": "IBM MQ Operator",
                  "product_id": "T036688",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:mq:operator"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Container",
                "product": {
                  "name": "IBM MQ Container",
                  "product_id": "T040640",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:mq:container"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "MQ"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "V10",
                "product": {
                  "name": "IBM Power Hardware Management Console V10",
                  "product_id": "T023373",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:hardware_management_console:v10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "V11",
                "product": {
                  "name": "IBM Power Hardware Management Console V11",
                  "product_id": "T046812",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:hardware_management_console:v11"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Power Hardware Management Console"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "for Multiplatforms 11.1",
                "product": {
                  "name": "IBM TXSeries for Multiplatforms 11.1",
                  "product_id": "T043237",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:txseries:for_multiplatforms_11.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "TXSeries"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.1",
                "product": {
                  "name": "IBM VIOS 3.1",
                  "product_id": "1039165",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:vios:3.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "4.1",
                "product": {
                  "name": "IBM VIOS 4.1",
                  "product_id": "1522854",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:vios:4.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "VIOS"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.10.004",
                "product": {
                  "name": "Meinberg LANTIME \u003c7.10.004",
                  "product_id": "T048945"
                }
              },
              {
                "category": "product_version",
                "name": "7.10.004",
                "product": {
                  "name": "Meinberg LANTIME 7.10.004",
                  "product_id": "T048945-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:7.10.004"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LANTIME"
          }
        ],
        "category": "vendor",
        "name": "Meinberg"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "9",
                "product": {
                  "name": "NetApp Data ONTAP 9",
                  "product_id": "T039981",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:netapp:data_ontap:9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Data ONTAP"
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source Arch Linux",
            "product": {
              "name": "Open Source Arch Linux",
              "product_id": "T013312",
              "product_identification_helper": {
                "cpe": "cpe:/o:archlinux:archlinux:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c5.0.8",
                "product": {
                  "name": "Open Source Fluentd \u003c5.0.8",
                  "product_id": "T047479"
                }
              },
              {
                "category": "product_version",
                "name": "5.0.8",
                "product": {
                  "name": "Open Source Fluentd 5.0.8",
                  "product_id": "T047479-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:fluentd:fluentd:5.0.8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Fluentd"
          },
          {
            "category": "product_name",
            "name": "Open Source libxml2",
            "product": {
              "name": "Open Source libxml2",
              "product_id": "T044565",
              "product_identification_helper": {
                "cpe": "cpe:/a:xmlsoft:libxml2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c12.3",
                "product": {
                  "name": "RealObjects PDFreactor \u003c12.3",
                  "product_id": "T046765"
                }
              },
              {
                "category": "product_version",
                "name": "12.3",
                "product": {
                  "name": "RealObjects PDFreactor 12.3",
                  "product_id": "T046765-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:realobjects:pdfreactor:12.3"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "PDFreactor"
          }
        ],
        "category": "vendor",
        "name": "RealObjects"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Container Platform 4.10",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.10",
                  "product_id": "T025742",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform_4.10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.11",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.11",
                  "product_id": "T025990",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform_4.11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.12",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.12",
                  "product_id": "T026435",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform_4.12"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.16.46",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.16.46",
                  "product_id": "T046064"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.16.46",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.16.46",
                  "product_id": "T046064-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.16.46"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.18.22",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.18.22",
                  "product_id": "T046065"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.18.22",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.18.22",
                  "product_id": "T046065-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.18.22"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.14.55",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.14.55",
                  "product_id": "T046202"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.14.55",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.14.55",
                  "product_id": "T046202-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.14.55"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.15.57",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.15.57",
                  "product_id": "T046523"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.15.57",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.15.57",
                  "product_id": "T046523-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.15.57"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.17.38",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.17.38",
                  "product_id": "T046524"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.17.38",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.17.38",
                  "product_id": "T046524-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.17.38"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.12.80",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.12.80",
                  "product_id": "T046943"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.12.80",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.12.80",
                  "product_id": "T046943-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.12.80"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.18.27",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.18.27",
                  "product_id": "T048184"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.18.27",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.18.27",
                  "product_id": "T048184-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.18.27"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenShift"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "SUSE openSUSE",
            "product": {
              "name": "SUSE openSUSE",
              "product_id": "T027843",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:opensuse:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c10.8.5",
                "product": {
                  "name": "Tenable Security Nessus \u003c10.8.5",
                  "product_id": "T044617"
                }
              },
              {
                "category": "product_version",
                "name": "10.8.5",
                "product": {
                  "name": "Tenable Security Nessus 10.8.5",
                  "product_id": "T044617-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus:agent__10.8.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.9.0",
                "product": {
                  "name": "Tenable Security Nessus \u003c10.9.0",
                  "product_id": "T044956"
                }
              },
              {
                "category": "product_version",
                "name": "10.9.0",
                "product": {
                  "name": "Tenable Security Nessus 10.9.0",
                  "product_id": "T044956-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus:10.9.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.11.1",
                "product": {
                  "name": "Tenable Security Nessus \u003c10.11.1",
                  "product_id": "T049431"
                }
              },
              {
                "category": "product_version",
                "name": "10.11.1",
                "product": {
                  "name": "Tenable Security Nessus 10.11.1",
                  "product_id": "T049431-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus:10.11.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.9.6",
                "product": {
                  "name": "Tenable Security Nessus \u003c10.9.6",
                  "product_id": "T049432"
                }
              },
              {
                "category": "product_version",
                "name": "10.9.6",
                "product": {
                  "name": "Tenable Security Nessus 10.9.6",
                  "product_id": "T049432-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus:10.9.6"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Nessus"
          }
        ],
        "category": "vendor",
        "name": "Tenable Security"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "v7",
                "product": {
                  "name": "Xerox FreeFlow Print Server v7",
                  "product_id": "T035098",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FreeFlow Print Server"
          }
        ],
        "category": "vendor",
        "name": "Xerox"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-49794",
      "product_status": {
        "known_affected": [
          "67646",
          "T035098",
          "T036688",
          "T004914",
          "1139691",
          "T046812",
          "T044956",
          "398363",
          "T025990",
          "T023373",
          "434967",
          "T048184",
          "T013312",
          "1039165",
          "1522854",
          "T044617",
          "T045928",
          "T039981",
          "T039664",
          "T046943",
          "T044565",
          "T048945",
          "T046523",
          "T046765",
          "T043237",
          "T046524",
          "T002207",
          "T000126",
          "T027843",
          "T027844",
          "T049432",
          "T046064",
          "T049431",
          "T025742",
          "T026435",
          "T046065",
          "T046202",
          "T040640",
          "T048226",
          "T047479",
          "T048301"
        ]
      },
      "release_date": "2025-06-11T22:00:00.000+00:00",
      "title": "CVE-2025-49794"
    },
    {
      "cve": "CVE-2025-49795",
      "product_status": {
        "known_affected": [
          "67646",
          "T035098",
          "T036688",
          "T004914",
          "1139691",
          "T046812",
          "T044956",
          "398363",
          "T025990",
          "T023373",
          "434967",
          "T048184",
          "T013312",
          "1039165",
          "1522854",
          "T044617",
          "T045928",
          "T039981",
          "T039664",
          "T046943",
          "T044565",
          "T048945",
          "T046523",
          "T046765",
          "T043237",
          "T046524",
          "T002207",
          "T000126",
          "T027843",
          "T027844",
          "T049432",
          "T046064",
          "T049431",
          "T025742",
          "T026435",
          "T046065",
          "T046202",
          "T040640",
          "T048226",
          "T047479",
          "T048301"
        ]
      },
      "release_date": "2025-06-11T22:00:00.000+00:00",
      "title": "CVE-2025-49795"
    },
    {
      "cve": "CVE-2025-49796",
      "product_status": {
        "known_affected": [
          "67646",
          "T035098",
          "T036688",
          "T004914",
          "1139691",
          "T046812",
          "T044956",
          "398363",
          "T025990",
          "T023373",
          "434967",
          "T048184",
          "T013312",
          "1039165",
          "1522854",
          "T044617",
          "T045928",
          "T039981",
          "T039664",
          "T046943",
          "T044565",
          "T048945",
          "T046523",
          "T046765",
          "T043237",
          "T046524",
          "T002207",
          "T000126",
          "T027843",
          "T027844",
          "T049432",
          "T046064",
          "T049431",
          "T025742",
          "T026435",
          "T046065",
          "T046202",
          "T040640",
          "T048226",
          "T047479",
          "T048301"
        ]
      },
      "release_date": "2025-06-11T22:00:00.000+00:00",
      "title": "CVE-2025-49796"
    },
    {
      "cve": "CVE-2025-6021",
      "product_status": {
        "known_affected": [
          "67646",
          "T035098",
          "T036688",
          "T004914",
          "1139691",
          "T046812",
          "T044956",
          "398363",
          "T025990",
          "T023373",
          "434967",
          "T048184",
          "T013312",
          "1039165",
          "1522854",
          "T044617",
          "T045928",
          "T039981",
          "T039664",
          "T046943",
          "T044565",
          "T048945",
          "T046523",
          "T046765",
          "T043237",
          "T046524",
          "T002207",
          "T000126",
          "T027843",
          "T027844",
          "T049432",
          "T046064",
          "T049431",
          "T025742",
          "T026435",
          "T046065",
          "T046202",
          "T040640",
          "T048226",
          "T047479",
          "T048301"
        ]
      },
      "release_date": "2025-06-11T22:00:00.000+00:00",
      "title": "CVE-2025-6021"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "IBM QRadar Security Information and Event Management (SIEM) bietet Unterst\u00fctzung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM Komponenten ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuf\u00fchren, um beliebigen Programmcode auszuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1905 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1905.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1905 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1905"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7243011 vom 2025-08-25",
        "url": "https://www.ibm.com/support/pages/node/7243011"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:14746 vom 2025-08-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:14746"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:14748 vom 2025-08-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:14748"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-17161 vom 2025-10-21",
        "url": "https://linux.oracle.com/errata/ELSA-2025-17161.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-22910 vom 2026-01-29",
        "url": "https://linux.oracle.com/errata/ELSA-2025-22910.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-1581 vom 2026-03-04",
        "url": "https://linux.oracle.com/errata/ELSA-2026-1581.html"
      }
    ],
    "source_lang": "en-US",
    "title": "IBM QRadar SIEM Komponente: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-03-04T23:00:00.000+00:00",
      "generator": {
        "date": "2026-03-05T09:20:05.962+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1905",
      "initial_release_date": "2025-08-25T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-08-25T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-08-27T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-20T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-01-29T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-03-04T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP13 IF01",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP13 IF01",
                  "product_id": "T046492"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0 UP13 IF01",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0 UP13 IF01",
                  "product_id": "T046492-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up13_if01"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-17543",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2019-17543"
    },
    {
      "cve": "CVE-2019-5427",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2019-5427"
    },
    {
      "cve": "CVE-2020-5260",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2020-5260"
    },
    {
      "cve": "CVE-2022-49058",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49058"
    },
    {
      "cve": "CVE-2022-49111",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49111"
    },
    {
      "cve": "CVE-2022-49136",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49136"
    },
    {
      "cve": "CVE-2022-49788",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49788"
    },
    {
      "cve": "CVE-2022-49846",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49846"
    },
    {
      "cve": "CVE-2022-49977",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-49977"
    },
    {
      "cve": "CVE-2022-50020",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2022-50020"
    },
    {
      "cve": "CVE-2024-23337",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-23337"
    },
    {
      "cve": "CVE-2024-28956",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-28956"
    },
    {
      "cve": "CVE-2024-34397",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-34397"
    },
    {
      "cve": "CVE-2024-43420",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-43420"
    },
    {
      "cve": "CVE-2024-45332",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-45332"
    },
    {
      "cve": "CVE-2024-50154",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-50154"
    },
    {
      "cve": "CVE-2024-50349",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-50349"
    },
    {
      "cve": "CVE-2024-52006",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-52006"
    },
    {
      "cve": "CVE-2024-52533",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-52533"
    },
    {
      "cve": "CVE-2024-53920",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-53920"
    },
    {
      "cve": "CVE-2024-54661",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-54661"
    },
    {
      "cve": "CVE-2024-57980",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-57980"
    },
    {
      "cve": "CVE-2024-58002",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-58002"
    },
    {
      "cve": "CVE-2024-6531",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2024-6531"
    },
    {
      "cve": "CVE-2025-20012",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-20012"
    },
    {
      "cve": "CVE-2025-20623",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-20623"
    },
    {
      "cve": "CVE-2025-21905",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-21905"
    },
    {
      "cve": "CVE-2025-21919",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-21919"
    },
    {
      "cve": "CVE-2025-21928",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-21928"
    },
    {
      "cve": "CVE-2025-21991",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-21991"
    },
    {
      "cve": "CVE-2025-22004",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-22004"
    },
    {
      "cve": "CVE-2025-22020",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-22020"
    },
    {
      "cve": "CVE-2025-23150",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-23150"
    },
    {
      "cve": "CVE-2025-24495",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-24495"
    },
    {
      "cve": "CVE-2025-27613",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-27613"
    },
    {
      "cve": "CVE-2025-27614",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-27614"
    },
    {
      "cve": "CVE-2025-32415",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-32415"
    },
    {
      "cve": "CVE-2025-37738",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-37738"
    },
    {
      "cve": "CVE-2025-37890",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-37890"
    },
    {
      "cve": "CVE-2025-38052",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-38052"
    },
    {
      "cve": "CVE-2025-38079",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-38079"
    },
    {
      "cve": "CVE-2025-38086",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-38086"
    },
    {
      "cve": "CVE-2025-4373",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-4373"
    },
    {
      "cve": "CVE-2025-46835",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-46835"
    },
    {
      "cve": "CVE-2025-47273",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-47273"
    },
    {
      "cve": "CVE-2025-48060",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-48060"
    },
    {
      "cve": "CVE-2025-48384",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-48384"
    },
    {
      "cve": "CVE-2025-48385",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-48385"
    },
    {
      "cve": "CVE-2025-49794",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-49794"
    },
    {
      "cve": "CVE-2025-49796",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-49796"
    },
    {
      "cve": "CVE-2025-52434",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-52434"
    },
    {
      "cve": "CVE-2025-52520",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-52520"
    },
    {
      "cve": "CVE-2025-53506",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-53506"
    },
    {
      "cve": "CVE-2025-55668",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-55668"
    },
    {
      "cve": "CVE-2025-6021",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-6021"
    },
    {
      "cve": "CVE-2025-6965",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-6965"
    },
    {
      "cve": "CVE-2025-7425",
      "product_status": {
        "known_affected": [
          "67646",
          "T046492",
          "T004914"
        ]
      },
      "release_date": "2025-08-25T22:00:00.000+00:00",
      "title": "CVE-2025-7425"
    }
  ]
}