{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "libxml2-2-2.9.4-1.22 on GA media",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "These are all security issues fixed in the libxml2-2-2.9.4-1.22 package on the GA media of openSUSE Tumbleweed.",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "openSUSE-Tumbleweed-2024-10192",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10192-1.json",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2008-4225 page",
            url: "https://www.suse.com/security/cve/CVE-2008-4225/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2008-4226 page",
            url: "https://www.suse.com/security/cve/CVE-2008-4226/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2008-4409 page",
            url: "https://www.suse.com/security/cve/CVE-2008-4409/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2010-4494 page",
            url: "https://www.suse.com/security/cve/CVE-2010-4494/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2011-1944 page",
            url: "https://www.suse.com/security/cve/CVE-2011-1944/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2012-5134 page",
            url: "https://www.suse.com/security/cve/CVE-2012-5134/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2013-0338 page",
            url: "https://www.suse.com/security/cve/CVE-2013-0338/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2013-1969 page",
            url: "https://www.suse.com/security/cve/CVE-2013-1969/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2014-0191 page",
            url: "https://www.suse.com/security/cve/CVE-2014-0191/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2014-3660 page",
            url: "https://www.suse.com/security/cve/CVE-2014-3660/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-1819 page",
            url: "https://www.suse.com/security/cve/CVE-2015-1819/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-5312 page",
            url: "https://www.suse.com/security/cve/CVE-2015-5312/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7497 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7497/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7498 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7498/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7499 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7499/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7500 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7500/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7941 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7941/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7942 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7942/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8035 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8035/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8242 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8242/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1762 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1762/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1833 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1833/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1834 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1834/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1835 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1835/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1836 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1836/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1837 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1837/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1838 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1838/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1839 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1839/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-1840 page",
            url: "https://www.suse.com/security/cve/CVE-2016-1840/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-3627 page",
            url: "https://www.suse.com/security/cve/CVE-2016-3627/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-3705 page",
            url: "https://www.suse.com/security/cve/CVE-2016-3705/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-4483 page",
            url: "https://www.suse.com/security/cve/CVE-2016-4483/",
         },
      ],
      title: "libxml2-2-2.9.4-1.22 on GA media",
      tracking: {
         current_release_date: "2024-06-15T00:00:00Z",
         generator: {
            date: "2024-06-15T00:00:00Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "openSUSE-SU-2024:10192-1",
         initial_release_date: "2024-06-15T00:00:00Z",
         revision_history: [
            {
               date: "2024-06-15T00:00:00Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.4-1.22.aarch64",
                        product: {
                           name: "libxml2-2-2.9.4-1.22.aarch64",
                           product_id: "libxml2-2-2.9.4-1.22.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-32bit-2.9.4-1.22.aarch64",
                        product: {
                           name: "libxml2-2-32bit-2.9.4-1.22.aarch64",
                           product_id: "libxml2-2-32bit-2.9.4-1.22.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.4-1.22.aarch64",
                        product: {
                           name: "libxml2-devel-2.9.4-1.22.aarch64",
                           product_id: "libxml2-devel-2.9.4-1.22.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-32bit-2.9.4-1.22.aarch64",
                        product: {
                           name: "libxml2-devel-32bit-2.9.4-1.22.aarch64",
                           product_id: "libxml2-devel-32bit-2.9.4-1.22.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-doc-2.9.4-1.22.aarch64",
                        product: {
                           name: "libxml2-doc-2.9.4-1.22.aarch64",
                           product_id: "libxml2-doc-2.9.4-1.22.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.4-1.22.aarch64",
                        product: {
                           name: "libxml2-tools-2.9.4-1.22.aarch64",
                           product_id: "libxml2-tools-2.9.4-1.22.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.4-1.22.ppc64le",
                        product: {
                           name: "libxml2-2-2.9.4-1.22.ppc64le",
                           product_id: "libxml2-2-2.9.4-1.22.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-32bit-2.9.4-1.22.ppc64le",
                        product: {
                           name: "libxml2-2-32bit-2.9.4-1.22.ppc64le",
                           product_id: "libxml2-2-32bit-2.9.4-1.22.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.4-1.22.ppc64le",
                        product: {
                           name: "libxml2-devel-2.9.4-1.22.ppc64le",
                           product_id: "libxml2-devel-2.9.4-1.22.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                        product: {
                           name: "libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                           product_id: "libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-doc-2.9.4-1.22.ppc64le",
                        product: {
                           name: "libxml2-doc-2.9.4-1.22.ppc64le",
                           product_id: "libxml2-doc-2.9.4-1.22.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.4-1.22.ppc64le",
                        product: {
                           name: "libxml2-tools-2.9.4-1.22.ppc64le",
                           product_id: "libxml2-tools-2.9.4-1.22.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.4-1.22.s390x",
                        product: {
                           name: "libxml2-2-2.9.4-1.22.s390x",
                           product_id: "libxml2-2-2.9.4-1.22.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-32bit-2.9.4-1.22.s390x",
                        product: {
                           name: "libxml2-2-32bit-2.9.4-1.22.s390x",
                           product_id: "libxml2-2-32bit-2.9.4-1.22.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.4-1.22.s390x",
                        product: {
                           name: "libxml2-devel-2.9.4-1.22.s390x",
                           product_id: "libxml2-devel-2.9.4-1.22.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-32bit-2.9.4-1.22.s390x",
                        product: {
                           name: "libxml2-devel-32bit-2.9.4-1.22.s390x",
                           product_id: "libxml2-devel-32bit-2.9.4-1.22.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-doc-2.9.4-1.22.s390x",
                        product: {
                           name: "libxml2-doc-2.9.4-1.22.s390x",
                           product_id: "libxml2-doc-2.9.4-1.22.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.4-1.22.s390x",
                        product: {
                           name: "libxml2-tools-2.9.4-1.22.s390x",
                           product_id: "libxml2-tools-2.9.4-1.22.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libxml2-2-2.9.4-1.22.x86_64",
                        product: {
                           name: "libxml2-2-2.9.4-1.22.x86_64",
                           product_id: "libxml2-2-2.9.4-1.22.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-2-32bit-2.9.4-1.22.x86_64",
                        product: {
                           name: "libxml2-2-32bit-2.9.4-1.22.x86_64",
                           product_id: "libxml2-2-32bit-2.9.4-1.22.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-2.9.4-1.22.x86_64",
                        product: {
                           name: "libxml2-devel-2.9.4-1.22.x86_64",
                           product_id: "libxml2-devel-2.9.4-1.22.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-devel-32bit-2.9.4-1.22.x86_64",
                        product: {
                           name: "libxml2-devel-32bit-2.9.4-1.22.x86_64",
                           product_id: "libxml2-devel-32bit-2.9.4-1.22.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-doc-2.9.4-1.22.x86_64",
                        product: {
                           name: "libxml2-doc-2.9.4-1.22.x86_64",
                           product_id: "libxml2-doc-2.9.4-1.22.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libxml2-tools-2.9.4-1.22.x86_64",
                        product: {
                           name: "libxml2-tools-2.9.4-1.22.x86_64",
                           product_id: "libxml2-tools-2.9.4-1.22.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "openSUSE Tumbleweed",
                        product: {
                           name: "openSUSE Tumbleweed",
                           product_id: "openSUSE Tumbleweed",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:tumbleweed",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.4-1.22.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
            },
            product_reference: "libxml2-2-2.9.4-1.22.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.4-1.22.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
            },
            product_reference: "libxml2-2-2.9.4-1.22.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.4-1.22.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
            },
            product_reference: "libxml2-2-2.9.4-1.22.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-2.9.4-1.22.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
            },
            product_reference: "libxml2-2-2.9.4-1.22.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.4-1.22.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
            },
            product_reference: "libxml2-2-32bit-2.9.4-1.22.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.4-1.22.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
            },
            product_reference: "libxml2-2-32bit-2.9.4-1.22.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.4-1.22.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
            },
            product_reference: "libxml2-2-32bit-2.9.4-1.22.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-2-32bit-2.9.4-1.22.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
            },
            product_reference: "libxml2-2-32bit-2.9.4-1.22.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.4-1.22.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
            },
            product_reference: "libxml2-devel-2.9.4-1.22.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.4-1.22.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
            },
            product_reference: "libxml2-devel-2.9.4-1.22.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.4-1.22.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
            },
            product_reference: "libxml2-devel-2.9.4-1.22.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-2.9.4-1.22.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
            },
            product_reference: "libxml2-devel-2.9.4-1.22.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-32bit-2.9.4-1.22.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
            },
            product_reference: "libxml2-devel-32bit-2.9.4-1.22.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-32bit-2.9.4-1.22.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
            },
            product_reference: "libxml2-devel-32bit-2.9.4-1.22.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-32bit-2.9.4-1.22.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
            },
            product_reference: "libxml2-devel-32bit-2.9.4-1.22.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-devel-32bit-2.9.4-1.22.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
            },
            product_reference: "libxml2-devel-32bit-2.9.4-1.22.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.4-1.22.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
            },
            product_reference: "libxml2-doc-2.9.4-1.22.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.4-1.22.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
            },
            product_reference: "libxml2-doc-2.9.4-1.22.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.4-1.22.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
            },
            product_reference: "libxml2-doc-2.9.4-1.22.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-doc-2.9.4-1.22.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
            },
            product_reference: "libxml2-doc-2.9.4-1.22.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.4-1.22.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
            },
            product_reference: "libxml2-tools-2.9.4-1.22.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.4-1.22.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
            },
            product_reference: "libxml2-tools-2.9.4-1.22.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.4-1.22.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
            },
            product_reference: "libxml2-tools-2.9.4-1.22.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libxml2-tools-2.9.4-1.22.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            },
            product_reference: "libxml2-tools-2.9.4-1.22.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2008-4225",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2008-4225",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite loop) via a large XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2008-4225",
               url: "https://www.suse.com/security/cve/CVE-2008-4225",
            },
            {
               category: "external",
               summary: "SUSE Bug 445677 for CVE-2008-4225",
               url: "https://bugzilla.suse.com/445677",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2008-4225",
      },
      {
         cve: "CVE-2008-4226",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2008-4226",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a large XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2008-4226",
               url: "https://www.suse.com/security/cve/CVE-2008-4226",
            },
            {
               category: "external",
               summary: "SUSE Bug 441368 for CVE-2008-4226",
               url: "https://bugzilla.suse.com/441368",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "critical",
            },
         ],
         title: "CVE-2008-4226",
      },
      {
         cve: "CVE-2008-4409",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2008-4409",
            },
         ],
         notes: [
            {
               category: "general",
               text: "libxml2 2.7.0 and 2.7.1 does not properly handle \"predefined entities definitions\" in entities, which allows context-dependent attackers to cause a denial of service (memory consumption and application crash), as demonstrated by use of xmllint on a certain XML document, a different vulnerability than CVE-2003-1564 and CVE-2008-3281.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2008-4409",
               url: "https://www.suse.com/security/cve/CVE-2008-4409",
            },
            {
               category: "external",
               summary: "SUSE Bug 432486 for CVE-2008-4409",
               url: "https://bugzilla.suse.com/432486",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2008-4409",
      },
      {
         cve: "CVE-2010-4494",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2010-4494",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2010-4494",
               url: "https://www.suse.com/security/cve/CVE-2010-4494",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2010-4494",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 661471 for CVE-2010-4494",
               url: "https://bugzilla.suse.com/661471",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2010-4494",
      },
      {
         cve: "CVE-2011-1944",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2011-1944",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2011-1944",
               url: "https://www.suse.com/security/cve/CVE-2011-1944",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2011-1944",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 697372 for CVE-2011-1944",
               url: "https://bugzilla.suse.com/697372",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "critical",
            },
         ],
         title: "CVE-2011-1944",
      },
      {
         cve: "CVE-2012-5134",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2012-5134",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2012-5134",
               url: "https://www.suse.com/security/cve/CVE-2012-5134",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2012-5134",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 791234 for CVE-2012-5134",
               url: "https://bugzilla.suse.com/791234",
            },
            {
               category: "external",
               summary: "SUSE Bug 793334 for CVE-2012-5134",
               url: "https://bugzilla.suse.com/793334",
            },
            {
               category: "external",
               summary: "SUSE Bug 795039 for CVE-2012-5134",
               url: "https://bugzilla.suse.com/795039",
            },
            {
               category: "external",
               summary: "SUSE Bug 804033 for CVE-2012-5134",
               url: "https://bugzilla.suse.com/804033",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2012-5134",
      },
      {
         cve: "CVE-2013-0338",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2013-0338",
            },
         ],
         notes: [
            {
               category: "general",
               text: "libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file containing an entity declaration with long replacement text and many references to this entity, aka \"internal entity expansion\" with linear complexity.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2013-0338",
               url: "https://www.suse.com/security/cve/CVE-2013-0338",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2013-0338",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 805233 for CVE-2013-0338",
               url: "https://bugzilla.suse.com/805233",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2013-0338",
      },
      {
         cve: "CVE-2013-1969",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2013-1969",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecl_done functions, as demonstrated by a buffer overflow in the xmlBufGetInputBase function.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2013-1969",
               url: "https://www.suse.com/security/cve/CVE-2013-1969",
            },
            {
               category: "external",
               summary: "SUSE Bug 815665 for CVE-2013-1969",
               url: "https://bugzilla.suse.com/815665",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2013-1969",
      },
      {
         cve: "CVE-2014-0191",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2014-0191",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2014-0191",
               url: "https://www.suse.com/security/cve/CVE-2014-0191",
            },
            {
               category: "external",
               summary: "SUSE Bug 1014873 for CVE-2014-0191",
               url: "https://bugzilla.suse.com/1014873",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2014-0191",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 876652 for CVE-2014-0191",
               url: "https://bugzilla.suse.com/876652",
            },
            {
               category: "external",
               summary: "SUSE Bug 877506 for CVE-2014-0191",
               url: "https://bugzilla.suse.com/877506",
            },
            {
               category: "external",
               summary: "SUSE Bug 996079 for CVE-2014-0191",
               url: "https://bugzilla.suse.com/996079",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2014-0191",
      },
      {
         cve: "CVE-2014-3660",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2014-3660",
            },
         ],
         notes: [
            {
               category: "general",
               text: "parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the \"billion laughs\" attack.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2014-3660",
               url: "https://www.suse.com/security/cve/CVE-2014-3660",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2014-3660",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 901546 for CVE-2014-3660",
               url: "https://bugzilla.suse.com/901546",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2014-3660",
      },
      {
         cve: "CVE-2015-1819",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-1819",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-1819",
               url: "https://www.suse.com/security/cve/CVE-2015-1819",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-1819",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 928193 for CVE-2015-1819",
               url: "https://bugzilla.suse.com/928193",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-1819",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-1819",
      },
      {
         cve: "CVE-2015-5312",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-5312",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-5312",
               url: "https://www.suse.com/security/cve/CVE-2015-5312",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-5312",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957105 for CVE-2015-5312",
               url: "https://bugzilla.suse.com/957105",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-5312",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-5312",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2015-5312",
      },
      {
         cve: "CVE-2015-7497",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7497",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7497",
               url: "https://www.suse.com/security/cve/CVE-2015-7497",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7497",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957106 for CVE-2015-7497",
               url: "https://bugzilla.suse.com/957106",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-7497",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7497",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7497",
      },
      {
         cve: "CVE-2015-7498",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7498",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7498",
               url: "https://www.suse.com/security/cve/CVE-2015-7498",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7498",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957107 for CVE-2015-7498",
               url: "https://bugzilla.suse.com/957107",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-7498",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7498",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7498",
      },
      {
         cve: "CVE-2015-7499",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7499",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7499",
               url: "https://www.suse.com/security/cve/CVE-2015-7499",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7499",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957109 for CVE-2015-7499",
               url: "https://bugzilla.suse.com/957109",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-7499",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7499",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7499",
      },
      {
         cve: "CVE-2015-7500",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7500",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7500",
               url: "https://www.suse.com/security/cve/CVE-2015-7500",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7500",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 957110 for CVE-2015-7500",
               url: "https://bugzilla.suse.com/957110",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-7500",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7500",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7500",
      },
      {
         cve: "CVE-2015-7941",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7941",
            },
         ],
         notes: [
            {
               category: "general",
               text: "libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl or (2) xmlParseConditionalSections function in parser.c, as demonstrated by non-terminated entities.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7941",
               url: "https://www.suse.com/security/cve/CVE-2015-7941",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7941",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 951734 for CVE-2015-7941",
               url: "https://bugzilla.suse.com/951734",
            },
            {
               category: "external",
               summary: "SUSE Bug 951735 for CVE-2015-7941",
               url: "https://bugzilla.suse.com/951735",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7941",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "low",
            },
         ],
         title: "CVE-2015-7941",
      },
      {
         cve: "CVE-2015-7942",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7942",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7942",
               url: "https://www.suse.com/security/cve/CVE-2015-7942",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-7942",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 951735 for CVE-2015-7942",
               url: "https://bugzilla.suse.com/951735",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-7942",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "low",
            },
         ],
         title: "CVE-2015-7942",
      },
      {
         cve: "CVE-2015-8035",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8035",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8035",
               url: "https://www.suse.com/security/cve/CVE-2015-8035",
            },
            {
               category: "external",
               summary: "SUSE Bug 1088279 for CVE-2015-8035",
               url: "https://bugzilla.suse.com/1088279",
            },
            {
               category: "external",
               summary: "SUSE Bug 1105166 for CVE-2015-8035",
               url: "https://bugzilla.suse.com/1105166",
            },
            {
               category: "external",
               summary: "SUSE Bug 954429 for CVE-2015-8035",
               url: "https://bugzilla.suse.com/954429",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "low",
            },
         ],
         title: "CVE-2015-8035",
      },
      {
         cve: "CVE-2015-8242",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8242",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8242",
               url: "https://www.suse.com/security/cve/CVE-2015-8242",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2015-8242",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 956021 for CVE-2015-8242",
               url: "https://bugzilla.suse.com/956021",
            },
            {
               category: "external",
               summary: "SUSE Bug 959469 for CVE-2015-8242",
               url: "https://bugzilla.suse.com/959469",
            },
            {
               category: "external",
               summary: "SUSE Bug 969769 for CVE-2015-8242",
               url: "https://bugzilla.suse.com/969769",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-8242",
      },
      {
         cve: "CVE-2016-1762",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1762",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1762",
               url: "https://www.suse.com/security/cve/CVE-2016-1762",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-1762",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 981040 for CVE-2016-1762",
               url: "https://bugzilla.suse.com/981040",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-1762",
      },
      {
         cve: "CVE-2016-1833",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1833",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1833",
               url: "https://www.suse.com/security/cve/CVE-2016-1833",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-1833",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 981108 for CVE-2016-1833",
               url: "https://bugzilla.suse.com/981108",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2016-1833",
      },
      {
         cve: "CVE-2016-1834",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1834",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1834",
               url: "https://www.suse.com/security/cve/CVE-2016-1834",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-1834",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 981041 for CVE-2016-1834",
               url: "https://bugzilla.suse.com/981041",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-1834",
      },
      {
         cve: "CVE-2016-1835",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1835",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1835",
               url: "https://www.suse.com/security/cve/CVE-2016-1835",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-1835",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 981109 for CVE-2016-1835",
               url: "https://bugzilla.suse.com/981109",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2016-1835",
      },
      {
         cve: "CVE-2016-1836",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1836",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1836",
               url: "https://www.suse.com/security/cve/CVE-2016-1836",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174862 for CVE-2016-1836",
               url: "https://bugzilla.suse.com/1174862",
            },
            {
               category: "external",
               summary: "SUSE Bug 981110 for CVE-2016-1836",
               url: "https://bugzilla.suse.com/981110",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2016-1836",
      },
      {
         cve: "CVE-2016-1837",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1837",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1837",
               url: "https://www.suse.com/security/cve/CVE-2016-1837",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-1837",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 981111 for CVE-2016-1837",
               url: "https://bugzilla.suse.com/981111",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2016-1837",
      },
      {
         cve: "CVE-2016-1838",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1838",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1838",
               url: "https://www.suse.com/security/cve/CVE-2016-1838",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-1838",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 981112 for CVE-2016-1838",
               url: "https://bugzilla.suse.com/981112",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2016-1838",
      },
      {
         cve: "CVE-2016-1839",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1839",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1839",
               url: "https://www.suse.com/security/cve/CVE-2016-1839",
            },
            {
               category: "external",
               summary: "SUSE Bug 1039069 for CVE-2016-1839",
               url: "https://bugzilla.suse.com/1039069",
            },
            {
               category: "external",
               summary: "SUSE Bug 1039661 for CVE-2016-1839",
               url: "https://bugzilla.suse.com/1039661",
            },
            {
               category: "external",
               summary: "SUSE Bug 1069433 for CVE-2016-1839",
               url: "https://bugzilla.suse.com/1069433",
            },
            {
               category: "external",
               summary: "SUSE Bug 1069690 for CVE-2016-1839",
               url: "https://bugzilla.suse.com/1069690",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-1839",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 963963 for CVE-2016-1839",
               url: "https://bugzilla.suse.com/963963",
            },
            {
               category: "external",
               summary: "SUSE Bug 981114 for CVE-2016-1839",
               url: "https://bugzilla.suse.com/981114",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-1839",
      },
      {
         cve: "CVE-2016-1840",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-1840",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-1840",
               url: "https://www.suse.com/security/cve/CVE-2016-1840",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-1840",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 981115 for CVE-2016-1840",
               url: "https://bugzilla.suse.com/981115",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2016-1840",
      },
      {
         cve: "CVE-2016-3627",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-3627",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-3627",
               url: "https://www.suse.com/security/cve/CVE-2016-3627",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026099 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/1026099",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026101 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/1026101",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 972335 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/972335",
            },
            {
               category: "external",
               summary: "SUSE Bug 975947 for CVE-2016-3627",
               url: "https://bugzilla.suse.com/975947",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-3627",
      },
      {
         cve: "CVE-2016-3705",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-3705",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-3705",
               url: "https://www.suse.com/security/cve/CVE-2016-3705",
            },
            {
               category: "external",
               summary: "SUSE Bug 1017497 for CVE-2016-3705",
               url: "https://bugzilla.suse.com/1017497",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-3705",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 975947 for CVE-2016-3705",
               url: "https://bugzilla.suse.com/975947",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "low",
            },
         ],
         title: "CVE-2016-3705",
      },
      {
         cve: "CVE-2016-4483",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-4483",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
               "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-4483",
               url: "https://www.suse.com/security/cve/CVE-2016-4483",
            },
            {
               category: "external",
               summary: "SUSE Bug 1026101 for CVE-2016-4483",
               url: "https://bugzilla.suse.com/1026101",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123919 for CVE-2016-4483",
               url: "https://bugzilla.suse.com/1123919",
            },
            {
               category: "external",
               summary: "SUSE Bug 978395 for CVE-2016-4483",
               url: "https://bugzilla.suse.com/978395",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-2-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-devel-32bit-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-doc-2.9.4-1.22.x86_64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.aarch64",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.ppc64le",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.s390x",
                  "openSUSE Tumbleweed:libxml2-tools-2.9.4-1.22.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "low",
            },
         ],
         title: "CVE-2016-4483",
      },
   ],
}