Release date:
2026-10-09 13:15:39 UTC
Description:
* SECURITY UPDATE: double free in the Python SAX attributeDecl callback
- debian/patches/CVE-2026-74860.patch: do not drop the reference to
each enumeration name after PyList_SetItem() in pythonAttributeDecl()
in python/libxml.c
- CVE-2026-74860
Updated packages:
-
libxml2_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17_amd64.deb
sha:228e4c95964cafb695ba8c16cc906dee736259cd
-
libxml2-dev_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17_amd64.deb
sha:1d81c84b95cd8ce8a7fbe3eee37c7035805a911d
-
libxml2-doc_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17_all.deb
sha:f1db3a2bd9d0b3341bb648cc7a56a9f3b99aa6ab
-
libxml2-utils_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17_amd64.deb
sha:4bd116a7862e3d7a98201b43c9e6d879868a7bf7
-
python-libxml2_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els17_amd64.deb
sha:a5b272f5d04cfa66dad05572fc27e2961c37a9f9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
