[CLSA-2025:1757413554] libxml2: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2025-09-09 10:25:58 UTC
Description:
- CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations
Updated packages:
  • libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els7.i686.rpm
    sha:e6c8302b1f9c7367f70b19d065265d1429e980e6c9ed49cac6af7693be68f29e
  • libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm
    sha:3233501a4c46f7bc126ef99eb925217ef0082b6f81499940c4374c830ad81556
  • libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els7.i686.rpm
    sha:e9725f3b53e88c1f6c174d0eb49ebda8784e93f79bd01b97b679e42f807ea6c1
  • libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm
    sha:b8bd9b1cd590ddca334898a30d13bf6c248a0e18e3de8d51510b7cc178db1bd9
  • libxml2-python-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm
    sha:ea943904cc8be62cfa802d90f8d45e874f44c91cf66bb6af20f6569427a5556a
  • libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els7.i686.rpm
    sha:eed511eb5ddb220134cf02988150b0c156f7666fa5662e75bd9963601821aefa
  • libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm
    sha:40b6a9f6a45374e55d540e2f872bc404672f52269dc8e93676dd5ccf3348306b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.