Release date:
2025-10-09 14:35:01 UTC
Description:
* SECURITY UPDATE: uncontrolled recursion causing stack overflow via crafted
XPath expressions
- debian/patches/CVE-2025-9714-*.patch: Add comprehensive XPath DoS protection
including operation limits, recursion depth controls, and proper handling
of recursive invocations to prevent stack overflows and resource exhaustion
- CVE-2025-9714
Updated packages:
-
libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
sha:912e44aed29f88f01b56c3b9322ef3d3e47b6f70
-
libxml2-dev_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
sha:de9f8ac03d0741db988bd0d8d35ab9855ecee92d
-
libxml2-doc_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_all.deb
sha:b1a29833fd7660cd04abb53420df878927168fce
-
libxml2-utils_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
sha:e4ea2f116f00ca3b556e9f7a7f6c11cc34ac14ce
-
python-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
sha:28067b2123aab57ea29c68a670d73c6e05251782
-
python3-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els7_amd64.deb
sha:79794d7b04f4545ba470871e581d0ab8af2af718
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.