[CLSA-2026:1790786185] libxml2: Fix of CVE-2026-74860
Type:
security
Severity:
Important
Release date:
2026-09-30 16:36:39 UTC
Description:
- CVE-2026-74860: drop the extra Py_DECREF() on each enumeration value string in pythonAttributeDecl(), since PyList_SetItem() already steals that reference
CVEs fixed:
Updated packages:
  • libxml2-2.9.13-12.el9_6.tuxcare.els10.aarch64.rpm
    sha:5dbc8686d94e6a2cbf42382aeed70383b1d717e48535bc4bb2eb3881b20bffb2
  • libxml2-2.9.13-12.el9_6.tuxcare.els10.i686.rpm
    sha:720143111917bc75a514d82fa5fd8ca0cb799061576089da5f39824ae390a6d2
  • libxml2-2.9.13-12.el9_6.tuxcare.els10.x86_64.rpm
    sha:411d98a3f0fc0fd6e025218b7d6b624be6465b15f069ed9cada224cd019180f1
  • libxml2-devel-2.9.13-12.el9_6.tuxcare.els10.aarch64.rpm
    sha:83b062e8eb49a2073a4a4623666680093cbb8ecb89a91b16daceab3c4ee7139b
  • libxml2-devel-2.9.13-12.el9_6.tuxcare.els10.i686.rpm
    sha:67bc5123442a6f3eaf5f133ea7ff2f523de9e4754025fa01a27efb79de9fb254
  • libxml2-devel-2.9.13-12.el9_6.tuxcare.els10.x86_64.rpm
    sha:2f125be5155d630453cfa4eb900a219702842482399e4fece54966d20a53a432
  • libxml2-static-2.9.13-12.el9_6.tuxcare.els10.aarch64.rpm
    sha:0e88bad02a85ffa2abf9d24881d15f6bb5b9cd7486480b0dd317696c8c17b9a9
  • libxml2-static-2.9.13-12.el9_6.tuxcare.els10.i686.rpm
    sha:dd5f0b9a9a239915f82972c364cb4389145e7b55e68a95dbaccdf49292fb2d01
  • libxml2-static-2.9.13-12.el9_6.tuxcare.els10.x86_64.rpm
    sha:2dea555b60e1e97fea52b40dc6bf2fb1a9afc2b47f71db26673195a864896ad3
  • python3-libxml2-2.9.13-12.el9_6.tuxcare.els10.aarch64.rpm
    sha:ee32d204f410d1264c954c65212b7a29c67b635c4c32cd49414c30b15b094bc0
  • python3-libxml2-2.9.13-12.el9_6.tuxcare.els10.i686.rpm
    sha:2f7450bf7e5a114ee3cd33afe70abb7c148a9381e7eda1d749c776d5fdc3aac7
  • python3-libxml2-2.9.13-12.el9_6.tuxcare.els10.x86_64.rpm
    sha:03ff5e3a76290b73a9d5da799d69a0736163bf5a1bfa7af85494fc7b757d986e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.