Release date:
2026-10-08 21:00:26 UTC
Description:
* SECURITY UPDATE: double free in the Python bindings' SAX attributeDecl
callback
- debian/patches/CVE-2026-74860.patch: do not Py_DECREF() the attribute
name string after PyList_SetItem() has stolen its reference in
pythonAttributeDecl() in python/libxml.c
- CVE-2026-74860
Updated packages:
-
libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12_amd64.deb
sha:d8ed1a246178363e856470abe71ac9f23ab2143e
-
libxml2-dev_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12_amd64.deb
sha:c9847d7c86c992a18ff4962b1c257576f3b7ec8b
-
libxml2-doc_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12_all.deb
sha:9ee34f4cf52ebc4f4f767367b22ddc153815694a
-
libxml2-utils_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12_amd64.deb
sha:f556595e6d54686098542f1a06cdefb8559dc8c4
-
python-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12_amd64.deb
sha:56344dc99ccb825fdc5a78458270bac4b9e419ad
-
python3-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els12_amd64.deb
sha:75d6d820cce9ed5428fa7693053b3640e7ed0745
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
