[CLSA-2025:1752654590] libxml2: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2025-07-16 08:29:56 UTC
Description:
- CVE-2025-49794: fix use-after-free issue triggered by processing certain elements in input XML file. - CVE-2025-49796: fix memory corruption issue triggered by processing certain sch:name elements from input XML file - CVE-2025-6021: fix integer overflow in buffer size calculations to prevent stack-based buffer overflow
Updated packages:
  • libxml2-2.9.7-18.el8.tuxcare.els7.i686.rpm
    sha:cbebde4c5bdec60776312a3c2dedae8031e1b4ae7dd20f480a1742e08aac2757
  • libxml2-2.9.7-18.el8.tuxcare.els7.x86_64.rpm
    sha:85f4c498fb26a85f67d65da8f89eebf9c6a6ac5551ee99cd08fadebeeb3353e7
  • libxml2-devel-2.9.7-18.el8.tuxcare.els7.i686.rpm
    sha:0fce78893d3cafad606cbe2f5b095b4ac0d3a74b606ae82ffb76c704e411d733
  • libxml2-devel-2.9.7-18.el8.tuxcare.els7.x86_64.rpm
    sha:555bac5dcbc02e91ab89fb63c92ce793495a79811da7418479731f1c19ab315b
  • libxml2-static-2.9.7-18.el8.tuxcare.els7.x86_64.rpm
    sha:2630037e26099bf9062c809779767e400b21b85d2070cd2d2f43230ed68f92b3
  • python3-libxml2-2.9.7-18.el8.tuxcare.els7.x86_64.rpm
    sha:9b2eed23074c0666a035bd82438aeca55b545cf455003af8982d4d6778c24c8c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.