[CLSA-2026:1791372460] libxml2: Fix of CVE-2026-74860
Type:
security
Severity:
Important
Release date:
2026-10-07 11:27:54 UTC
Description:
- CVE-2026-74860: do not decref enumerated attribute value strings after adding them to the list in the Python SAX attributeDecl callback, preventing a double free
CVEs fixed:
Updated packages:
  • libxml2-2.9.7-18.el8.tuxcare.els14.i686.rpm
    sha:178679c4917fdc474442d3fd31cd2eb9ab6bb8284408ee36f8030960e334412e
  • libxml2-2.9.7-18.el8.tuxcare.els14.x86_64.rpm
    sha:20eae01ae01436ba9b957a2ce4c6542527ecf23b0bed7ac3a80bf97acd2a73f9
  • libxml2-devel-2.9.7-18.el8.tuxcare.els14.i686.rpm
    sha:57b971e7b10a45dd20f25f64777a2934f61e6f7b6814e187c388b7fb16668b15
  • libxml2-devel-2.9.7-18.el8.tuxcare.els14.x86_64.rpm
    sha:3e8de99936ced7e4ee9c3eb394d468ca7011f8d6fd26c65da17606d3be0e9db8
  • libxml2-static-2.9.7-18.el8.tuxcare.els14.i686.rpm
    sha:cf22598ff61cd13d20dfaa85d0fea118659fa754a5b1731f36748ef3c7147056
  • libxml2-static-2.9.7-18.el8.tuxcare.els14.x86_64.rpm
    sha:29bb995b606c6e531e5631c136584b3c6e0a691ec610dc65f7dda7cfe91d3677
  • python3-libxml2-2.9.7-18.el8.tuxcare.els14.i686.rpm
    sha:f2e6fbd8e8406fee36be74681b45543335d5e467a2ce16608f6d0737b0c4bb99
  • python3-libxml2-2.9.7-18.el8.tuxcare.els14.x86_64.rpm
    sha:9bc827d8161f5c12ef9143811f01e4844c8bf29c2ef93ae9d07b940764c30a2e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.