[CLSA-2025:1760020498] Fix CVE(s): CVE-2025-9714
Type:
security
Severity:
Moderate
Release date:
2025-10-09 14:35:01 UTC
Description:
* SECURITY UPDATE: uncontrolled recursion causing stack overflow via crafted XPath expressions - debian/patches/CVE-2025-9714-*.patch: Add comprehensive XPath DoS protection including operation limits, recursion depth controls, and proper handling of recursive invocations to prevent stack overflows and resource exhaustion - CVE-2025-9714
Updated packages:
  • libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
    sha:912e44aed29f88f01b56c3b9322ef3d3e47b6f70
  • libxml2-dev_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
    sha:de9f8ac03d0741db988bd0d8d35ab9855ecee92d
  • libxml2-doc_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_all.deb
    sha:b1a29833fd7660cd04abb53420df878927168fce
  • libxml2-utils_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
    sha:e4ea2f116f00ca3b556e9f7a7f6c11cc34ac14ce
  • python-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
    sha:28067b2123aab57ea29c68a670d73c6e05251782
  • python3-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
    sha:79794d7b04f4545ba470871e581d0ab8af2af718
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.