Release date:
2026-10-04 12:44:04 UTC
Description:
- CVE-2025-7425: clear the attribute type through the live attr argument in
xmlRemoveID() instead of id->attr, which read the xmlID already freed by
xmlHashRemoveEntry()
- CVE-2022-23308: normalize the ID value in xmlRemoveID() after it is read
from the attribute instead of before, where the pointer was uninitialized
Updated packages:
-
libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els2.i686.rpm
sha:8f2e0679f7afd2d60ccf516e856db549e8ee094f30431466cadbc733465d56fd
-
libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els2.x86_64.rpm
sha:da093711f89b3f82330024dcd0183f1f9f55bc1feaf7e562ae11af7b1e9848f2
-
libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els2.i686.rpm
sha:d1c26a7839f06c56c2ece85686fb71e78ab03dcb8413b451c806bca3e2ed0a16
-
libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els2.x86_64.rpm
sha:0b880a212c859f795732854c29d17061383025396b7abaa5656449ac842b2854
-
libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els2.i686.rpm
sha:e482a80ea90424ce662979879b650e9a301346865f47f3ce4525e25b81eee96a
-
libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els2.x86_64.rpm
sha:e5252e93d65b1177ec5de15ed6e177d13d7e0b6c36b5313c6967b07494ffc0c7
-
libxml2-static-2.9.1-6.0.13.el7_9.6.tuxcare.els2.i686.rpm
sha:00e260d0b565eba56a92a3b7bd2d6c466a16d5dd01996c6beafcc8da19506ce7
-
libxml2-static-2.9.1-6.0.13.el7_9.6.tuxcare.els2.x86_64.rpm
sha:7e956c7bd7c1fe17879bb7d30c4020c30d9934e06bae7f38ec24c9bbfe4353a0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
