[CLSA-2026:1790833998] libxml2: Fix of CVE-2026-74860
Type:
security
Severity:
Important
Release date:
2026-10-01 10:55:10 UTC
Description:
- CVE-2026-74860: drop the extra Py_DECREF() on each enumeration value string in pythonAttributeDecl(), since PyList_SetItem() already steals that reference
CVEs fixed:
Updated packages:
  • libxml2-2.9.13-3.el9_2.1.tuxcare.els18.aarch64.rpm
    sha:be50ad7c8fc131bb4dbdb58877b10bdb919ef43b287dbe6efa8b238810d84c9a
  • libxml2-2.9.13-3.el9_2.1.tuxcare.els18.i686.rpm
    sha:2e9fd86b56d15adaed11517ac4b3bbc484fcc39b006be9651176edee6c869c01
  • libxml2-2.9.13-3.el9_2.1.tuxcare.els18.x86_64.rpm
    sha:63a6c0059ac013dba1cd0e5aeb64cab5a0ec703be54ee17f089d32717c6dbf20
  • libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els18.aarch64.rpm
    sha:c45c5a7ffc4c75c1dddb98c8e35a21c175d45d398ebec96919f82c1207cf6d79
  • libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els18.i686.rpm
    sha:f4d8a077e7c791c6cfcf37622e371eb6018c005f364a22d200519c2b72c9ea4f
  • libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els18.x86_64.rpm
    sha:9d349244365e90d6d649fe31d0581851815013d6f6e798415d4ec68346293fed
  • libxml2-static-2.9.13-3.el9_2.1.tuxcare.els18.aarch64.rpm
    sha:8ac07b2aee6faed2928785dae5989421ca39f1f3d5d9f7324acd5a3f38c35d51
  • libxml2-static-2.9.13-3.el9_2.1.tuxcare.els18.i686.rpm
    sha:ca809b02bf21287c56956d85a3bd1966bc6bd5bdbb40df8a7ff2634014db6487
  • libxml2-static-2.9.13-3.el9_2.1.tuxcare.els18.x86_64.rpm
    sha:8fe83e1805a447263713cad1c875b33c68d907111e5663bf5bf27f55dd4ddcde
  • python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els18.aarch64.rpm
    sha:cb420d9ad64193d0ff517e3be72b9e5a6d4d120663ef6585e60ecedb1f1c45f8
  • python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els18.i686.rpm
    sha:e58a1512e4a2a1e386b0e734d08006ae34081cf4fe49c7c417780c612a91d4c0
  • python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els18.x86_64.rpm
    sha:7fb6c7eef7275fdb54a103bae5ae5c61a76892ef99f697f3005d40530ed4d530
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.