[CLSA-2025:1755708467] libxml2: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2025-08-20 16:47:51 UTC
Description:
- CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c - CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c
Updated packages:
  • libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els6.i686.rpm
    sha:dc864906be4101dd04d6fca279fb967d0978fe79d7d33618393d55a7fa8b2f2b
  • libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els6.x86_64.rpm
    sha:13bed8c486ec8cc68cd4a856503df78d2461e3b85aef2b8cec9ba6434f1b8888
  • libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els6.i686.rpm
    sha:cd87b220ed78e346326fec3a0d2f2a207928612b817a6f0a7a22214583a9f65f
  • libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els6.x86_64.rpm
    sha:36d81b5411d789cd208616c07705a2893804ead35cc48f9e29ff4e22d3b9d80b
  • libxml2-python-2.9.1-6.0.3.el7_9.6.tuxcare.els6.x86_64.rpm
    sha:4033af7c80c08d66d416624cb0f866d61482cd06e609c8cad04b2401e84d1d0e
  • libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els6.i686.rpm
    sha:9aafb1856f0dbc8271420e3016a2f4f3d70795a586577437839fab67d6324595
  • libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els6.x86_64.rpm
    sha:9b2a256ccb07a10b1d61f6942f3ef98fb2465dd1714083cc4bd709196d0ef57a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.