[create-pull-request] automated change

mbauman · jlsec-bot · commit 2dcc8932100b · 2025-10-22T22:39:26.000Z
diff --git a/advisories/published/2025/JLSEC-0000-mnsapzncq-17dqbmp.md b/advisories/published/2025/JLSEC-0000-mnsapzncq-17dqbmp.md
@@ -0,0 +1,24 @@
+```toml
+schema_version = "1.7.3"
+id = "JLSEC-0000-mnsapzncq-17dqbmp"
+modified = 2025-10-22T22:39:19.034Z
+upstream = ["CVE-2025-6021"]
+references = ["https://access.redhat.com/errata/RHSA-2025:10630", "https://access.redhat.com/errata/RHSA-2025:10698", "https://access.redhat.com/errata/RHSA-2025:10699", "https://access.redhat.com/errata/RHSA-2025:11580", "https://access.redhat.com/errata/RHSA-2025:12098", "https://access.redhat.com/errata/RHSA-2025:12099", "https://access.redhat.com/errata/RHSA-2025:12199", "https://access.redhat.com/errata/RHSA-2025:12237", "https://access.redhat.com/errata/RHSA-2025:12239", "https://access.redhat.com/errata/RHSA-2025:12240", "https://access.redhat.com/errata/RHSA-2025:12241", "https://access.redhat.com/errata/RHSA-2025:13267", "https://access.redhat.com/errata/RHSA-2025:13289", "https://access.redhat.com/errata/RHSA-2025:13325", "https://access.redhat.com/errata/RHSA-2025:13335", "https://access.redhat.com/errata/RHSA-2025:13336", "https://access.redhat.com/errata/RHSA-2025:14059", "https://access.redhat.com/errata/RHSA-2025:14396", "https://access.redhat.com/errata/RHSA-2025:15308", "https://access.redhat.com/errata/RHSA-2025:15672", "https://access.redhat.com/security/cve/CVE-2025-6021", "https://bugzilla.redhat.com/show_bug.cgi?id=2372406", "https://gitlab.gnome.org/GNOME/libxml2/-/issues/926"]
+
+[[affected]]
+pkg = "XML2_jll"
+ranges = ["< 2.14.4+0"]
+
+[[jlsec_sources]]
+id = "CVE-2025-6021"
+imported = 2025-10-22T22:39:19.034Z
+modified = 2025-10-22T13:08:44.160Z
+published = 2025-06-12T13:15:25.590Z
+url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-6021"
+html_url = "https://nvd.nist.gov/vuln/detail/CVE-2025-6021"
+```
+
+# A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calcula...
+
+A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
+
diff --git a/advisories/published/2025/JLSEC-2025-66.md b/advisories/published/2025/JLSEC-2025-66.md
@@ -12,7 +12,7 @@ ranges = ["< 2.9.10+0"]
 
 [[jlsec_sources]]
 id = "CVE-2019-19956"
-imported = 2025-10-17T17:21:54.213Z
+imported = 2025-10-22T22:39:17.325Z
 modified = 2024-11-21T04:35:44.420Z
 published = 2019-12-24T16:15:11.450Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2019-19956"
diff --git a/advisories/published/2025/JLSEC-2025-67.md b/advisories/published/2025/JLSEC-2025-67.md
@@ -12,7 +12,7 @@ ranges = [">= 2.9.10+0, < 2.9.12+0"]
 
 [[jlsec_sources]]
 id = "CVE-2019-20388"
-imported = 2025-10-17T17:21:54.216Z
+imported = 2025-10-22T22:39:17.327Z
 modified = 2024-11-21T04:38:21.893Z
 published = 2020-01-21T23:15:13.553Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2019-20388"
diff --git a/advisories/published/2025/JLSEC-2025-68.md b/advisories/published/2025/JLSEC-2025-68.md
@@ -12,7 +12,7 @@ ranges = [">= 2.9.10+0, < 2.9.12+0"]
 
 [[jlsec_sources]]
 id = "CVE-2020-7595"
-imported = 2025-10-17T17:21:54.217Z
+imported = 2025-10-22T22:39:17.329Z
 modified = 2024-11-21T05:37:26.453Z
 published = 2020-01-21T23:15:13.867Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2020-7595"
diff --git a/advisories/published/2025/JLSEC-2025-69.md b/advisories/published/2025/JLSEC-2025-69.md
@@ -12,7 +12,7 @@ ranges = [">= 2.9.10+0, < 2.9.12+0"]
 
 [[jlsec_sources]]
 id = "CVE-2020-24977"
-imported = 2025-10-17T17:21:54.218Z
+imported = 2025-10-22T22:39:17.330Z
 modified = 2024-11-21T05:16:15.740Z
 published = 2020-09-04T00:15:10.693Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2020-24977"
diff --git a/advisories/published/2025/JLSEC-2025-70.md b/advisories/published/2025/JLSEC-2025-70.md
@@ -12,7 +12,7 @@ ranges = ["< 2.9.12+0"]
 
 [[jlsec_sources]]
 id = "CVE-2021-3537"
-imported = 2025-10-17T17:21:54.219Z
+imported = 2025-10-22T22:39:17.331Z
 modified = 2024-11-21T06:21:47.317Z
 published = 2021-05-14T20:15:16.553Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-3537"
diff --git a/advisories/published/2025/JLSEC-2025-71.md b/advisories/published/2025/JLSEC-2025-71.md
@@ -12,7 +12,7 @@ ranges = ["< 2.9.12+0"]
 
 [[jlsec_sources]]
 id = "CVE-2021-3518"
-imported = 2025-10-17T17:21:54.220Z
+imported = 2025-10-22T22:39:17.332Z
 modified = 2024-11-21T06:21:44.453Z
 published = 2021-05-18T12:15:08.043Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-3518"
diff --git a/advisories/published/2025/JLSEC-2025-72.md b/advisories/published/2025/JLSEC-2025-72.md
@@ -12,7 +12,7 @@ ranges = ["< 2.9.12+0"]
 
 [[jlsec_sources]]
 id = "CVE-2021-3517"
-imported = 2025-10-17T17:21:54.221Z
+imported = 2025-10-22T22:39:17.333Z
 modified = 2024-11-21T06:21:44.107Z
 published = 2021-05-19T14:15:07.553Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-3517"
diff --git a/advisories/published/2025/JLSEC-2025-73.md b/advisories/published/2025/JLSEC-2025-73.md
@@ -12,7 +12,7 @@ ranges = ["< 2.9.12+0"]
 
 [[jlsec_sources]]
 id = "CVE-2021-3541"
-imported = 2025-10-17T17:21:54.222Z
+imported = 2025-10-22T22:39:17.334Z
 modified = 2024-11-21T06:21:48.007Z
 published = 2021-07-09T17:15:07.973Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-3541"
diff --git a/advisories/published/2025/JLSEC-2025-74.md b/advisories/published/2025/JLSEC-2025-74.md
@@ -12,7 +12,7 @@ ranges = ["< 2.9.14+0"]
 
 [[jlsec_sources]]
 id = "CVE-2022-23308"
-imported = 2025-10-17T17:21:54.223Z
+imported = 2025-10-22T22:39:17.335Z
 modified = 2025-05-05T17:17:56.523Z
 published = 2022-02-26T05:15:08.280Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2022-23308"
diff --git a/advisories/published/2025/JLSEC-2025-75.md b/advisories/published/2025/JLSEC-2025-75.md
@@ -15,7 +15,7 @@ ranges = ["< 1.1.41+0"]
 
 [[jlsec_sources]]
 id = "CVE-2022-29824"
-imported = 2025-10-17T17:21:54.225Z
+imported = 2025-10-22T22:39:17.337Z
 modified = 2024-11-21T06:59:45.417Z
 published = 2022-05-03T03:15:06.687Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2022-29824"
diff --git a/advisories/published/2025/JLSEC-2025-76.md b/advisories/published/2025/JLSEC-2025-76.md
@@ -12,7 +12,7 @@ ranges = ["< 2.9.12+0"]
 
 [[jlsec_sources]]
 id = "CVE-2016-3709"
-imported = 2025-10-17T17:21:55.837Z
+imported = 2025-10-22T22:39:18.977Z
 modified = 2024-11-21T02:50:32.833Z
 published = 2022-07-28T17:15:07.920Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2016-3709"
diff --git a/advisories/published/2025/JLSEC-2025-77.md b/advisories/published/2025/JLSEC-2025-77.md
@@ -12,7 +12,7 @@ ranges = ["< 2.10.3+0"]
 
 [[jlsec_sources]]
 id = "CVE-2022-40303"
-imported = 2025-10-17T17:21:55.838Z
+imported = 2025-10-22T22:39:18.978Z
 modified = 2025-04-29T05:15:43.693Z
 published = 2022-11-23T00:15:11.007Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2022-40303"
diff --git a/advisories/published/2025/JLSEC-2025-78.md b/advisories/published/2025/JLSEC-2025-78.md
@@ -12,7 +12,7 @@ ranges = ["< 2.10.3+0"]
 
 [[jlsec_sources]]
 id = "CVE-2022-40304"
-imported = 2025-10-17T17:21:55.839Z
+imported = 2025-10-22T22:39:18.979Z
 modified = 2025-04-28T20:15:19.607Z
 published = 2022-11-23T18:15:12.167Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2022-40304"
diff --git a/advisories/published/2025/JLSEC-2025-79.md b/advisories/published/2025/JLSEC-2025-79.md
@@ -12,7 +12,7 @@ ranges = ["< 2.10.4+0", ">= 2.11.5+0, < 2.12.0+0"]
 
 [[jlsec_sources]]
 id = "CVE-2023-28484"
-imported = 2025-10-17T17:21:55.879Z
+imported = 2025-10-22T22:39:19.018Z
 modified = 2025-05-30T20:15:31.550Z
 published = 2023-04-24T21:15:09.180Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2023-28484"
diff --git a/advisories/published/2025/JLSEC-2025-80.md b/advisories/published/2025/JLSEC-2025-80.md
@@ -12,7 +12,7 @@ ranges = ["< 2.10.4+0", ">= 2.11.5+0, < 2.12.0+0"]
 
 [[jlsec_sources]]
 id = "CVE-2023-29469"
-imported = 2025-10-17T17:21:55.880Z
+imported = 2025-10-22T22:39:19.020Z
 modified = 2025-02-04T21:15:23.447Z
 published = 2023-04-24T21:15:09.230Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2023-29469"
diff --git a/advisories/published/2025/JLSEC-2025-81.md b/advisories/published/2025/JLSEC-2025-81.md
@@ -12,7 +12,7 @@ ranges = [">= 2.11.5+0, < 2.12.0+0"]
 
 [[jlsec_sources]]
 id = "CVE-2023-39615"
-imported = 2025-10-17T17:21:55.881Z
+imported = 2025-10-22T22:39:19.021Z
 modified = 2024-11-21T08:15:42.583Z
 published = 2023-08-29T17:15:12.527Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2023-39615"
diff --git a/advisories/published/2025/JLSEC-2025-82.md b/advisories/published/2025/JLSEC-2025-82.md
@@ -12,7 +12,7 @@ ranges = ["< 2.12.0+0"]
 
 [[jlsec_sources]]
 id = "CVE-2023-45322"
-imported = 2025-10-17T17:21:55.881Z
+imported = 2025-10-22T22:39:19.022Z
 modified = 2024-11-21T08:26:44.780Z
 published = 2023-10-06T22:15:11.660Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2023-45322"
diff --git a/advisories/published/2025/JLSEC-2025-83.md b/advisories/published/2025/JLSEC-2025-83.md
@@ -12,7 +12,7 @@ ranges = ["< 2.12.5+0"]
 
 [[jlsec_sources]]
 id = "CVE-2024-25062"
-imported = 2025-10-17T17:21:55.883Z
+imported = 2025-10-22T22:39:19.023Z
 modified = 2025-05-09T18:16:03.707Z
 published = 2024-02-04T16:15:45.120Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-25062"
diff --git a/advisories/published/2025/JLSEC-2025-84.md b/advisories/published/2025/JLSEC-2025-84.md
@@ -12,7 +12,7 @@ ranges = ["< 2.12.7+0"]
 
 [[jlsec_sources]]
 id = "CVE-2024-34459"
-imported = 2025-10-17T17:21:55.884Z
+imported = 2025-10-22T22:39:19.025Z
 modified = 2025-10-10T18:00:14.990Z
 published = 2024-05-14T15:39:11.917Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-34459"
diff --git a/advisories/published/2025/JLSEC-2025-85.md b/advisories/published/2025/JLSEC-2025-85.md
@@ -12,7 +12,7 @@ ranges = ["< 2.12.0+0"]
 
 [[jlsec_sources]]
 id = "CVE-2022-49043"
-imported = 2025-10-17T17:21:55.885Z
+imported = 2025-10-22T22:39:19.026Z
 modified = 2025-10-07T16:24:00.340Z
 published = 2025-01-26T06:15:21.000Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2022-49043"
diff --git a/advisories/published/2025/JLSEC-2025-86.md b/advisories/published/2025/JLSEC-2025-86.md
@@ -12,7 +12,7 @@ ranges = ["< 2.13.6+1"]
 
 [[jlsec_sources]]
 id = "CVE-2024-56171"
-imported = 2025-10-17T17:21:55.886Z
+imported = 2025-10-22T22:39:19.027Z
 modified = 2025-10-16T19:39:26.400Z
 published = 2025-02-18T22:15:12.797Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-56171"
diff --git a/advisories/published/2025/JLSEC-2025-87.md b/advisories/published/2025/JLSEC-2025-87.md
@@ -12,7 +12,7 @@ ranges = ["< 2.13.6+1"]
 
 [[jlsec_sources]]
 id = "CVE-2025-24928"
-imported = 2025-10-17T17:21:55.888Z
+imported = 2025-10-22T22:39:19.028Z
 modified = 2025-10-16T19:34:33.453Z
 published = 2025-02-18T23:15:10.250Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-24928"
diff --git a/advisories/published/2025/JLSEC-2025-88.md b/advisories/published/2025/JLSEC-2025-88.md
@@ -12,7 +12,7 @@ ranges = ["< 2.13.6+1"]
 
 [[jlsec_sources]]
 id = "CVE-2025-27113"
-imported = 2025-10-17T17:21:55.889Z
+imported = 2025-10-22T22:39:19.030Z
 modified = 2025-03-07T01:15:12.823Z
 published = 2025-02-18T23:15:10.960Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-27113"
diff --git a/advisories/published/2025/JLSEC-2025-89.md b/advisories/published/2025/JLSEC-2025-89.md
@@ -12,7 +12,7 @@ ranges = ["< 2.13.8+0", ">= 2.14.1+0, < 2.14.4+0"]
 
 [[jlsec_sources]]
 id = "CVE-2025-32414"
-imported = 2025-10-17T17:21:55.890Z
+imported = 2025-10-22T22:39:19.031Z
 modified = 2025-04-23T19:09:35.517Z
 published = 2025-04-08T03:15:15.940Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-32414"
diff --git a/advisories/published/2025/JLSEC-2025-90.md b/advisories/published/2025/JLSEC-2025-90.md
@@ -12,7 +12,7 @@ ranges = ["< 2.13.8+0", ">= 2.14.1+0, < 2.14.4+0"]
 
 [[jlsec_sources]]
 id = "CVE-2025-32415"
-imported = 2025-10-17T17:21:55.892Z
+imported = 2025-10-22T22:39:19.033Z
 modified = 2025-04-23T18:17:52.053Z
 published = 2025-04-17T17:15:33.733Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-32415"
diff --git a/advisories/published/2025/JLSEC-2025-91.md b/advisories/published/2025/JLSEC-2025-91.md
@@ -12,7 +12,7 @@ ranges = ["< 2.10.3+0"]
 
 [[jlsec_sources]]
 id = "CVE-2025-9714"
-imported = 2025-10-17T17:21:55.893Z
+imported = 2025-10-22T22:39:19.035Z
 modified = 2025-09-17T21:13:10.787Z
 published = 2025-09-10T19:15:42.707Z
 url = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-9714"
