[CLSA-2025:1757427923] libxml2: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2025-09-09 14:25:27 UTC
Description:
- CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations
Updated packages:
  • libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els7.i686.rpm
    sha:10438dc7a1e18864472b32024da0c54259caabd72ff01f5c53aafd465f932dad
  • libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm
    sha:f29f195d221cf8f4f22339661caef70b0e2bdb0e817864fd4205031dec1619ed
  • libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els7.i686.rpm
    sha:147df060a155c90d04eb232f455f79a703d8913bc80caf0412ec488b286f6032
  • libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm
    sha:514ce35fb6e2a879071521cebe830ea8de4189a0f3e86a4c86879485ac3298d6
  • libxml2-python-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm
    sha:350b175d1aab5a3520eadfdf755fee4837c53aca86314da38dc14d5a25f047b1
  • libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els7.i686.rpm
    sha:16184ec47afe5d2f2f57db6280cca94e03a926d236970f600be4ecf9a0bec899
  • libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm
    sha:e8c37ccd7affd1a2f3a2b03f1989341feca346a1711bd87628b94cd003edd67b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.