[CLSA-2025:1758228293] Fix CVE(s): CVE-2025-7425
Type:
security
Severity:
Important
Release date:
2025-09-18 20:44:57 UTC
Description:
* SECURITY UPDATE: memory corruption vulnerability in attribute type flags - debian/patches/CVE-2025-7425.patch: fix heap-use-after-free in xmlFreeID caused by `atype` corruption - CVE-2025-7425
Updated packages:
  • libxml2_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els12_amd64.deb
    sha:3d644bc30868fd5070ecd3b2133fffe60b108825
  • libxml2-dev_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els12_amd64.deb
    sha:3611a4a0c6e332ed0e4843137938b6e9783e164a
  • libxml2-doc_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els12_all.deb
    sha:ac85c3e798c0315bcd9c07a6f6dd80161675d54c
  • libxml2-utils_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els12_amd64.deb
    sha:8d57cdcaa37ab851bd1037b8342d7c0a68cff602
  • python-libxml2_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els12_amd64.deb
    sha:e3c1e9b15b8cbec73751fb8d68a530336b195113
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.