[CLSA-2026:1789473529] libxml2: Fix of CVE-2026-6653
Type:
security
Severity:
Critical
Release date:
2026-09-15 11:59:00 UTC
Description:
- CVE-2026-6653: fix use-after-free in xmlParseInternalSubset by not reporting a halted parser as an xmlPushInput failure after the input was installed
CVEs fixed:
Updated packages:
  • libxml2-2.9.13-3.el9_2.1.tuxcare.els15.i686.rpm
    sha:a4fcdfd87cfbc0c807757bbe72272c462e2a8e1c3edf0a94ee2f6f6706a01ef9
  • libxml2-2.9.13-3.el9_2.1.tuxcare.els15.x86_64.rpm
    sha:571af4b3101b64b2553fda370da376267aaaf0758838f5ccb3b940a5c4251c22
  • libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els15.i686.rpm
    sha:4f43da16dfd9da6c12bfa5140b5b9a0a3dbbbd190f630ac94de707e99025b979
  • libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els15.x86_64.rpm
    sha:b2df49d777afcc2a9739007f9dadf5090eeb10e3013db40d8b79970cc2e7fc6f
  • libxml2-static-2.9.13-3.el9_2.1.tuxcare.els15.x86_64.rpm
    sha:64d8e4979237f0b6047ce527265608dbe9b1e2dfdc1427182ca58180a82c136e
  • python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els15.x86_64.rpm
    sha:ecc972fab29349f32b0e62fa98f1f70c5817edcb2618f2c953ca98faae5012da
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.