Release date:
2026-10-08 20:05:27 UTC
Description:
* SECURITY UPDATE: double free in the Python bindings' SAX attributeDecl
callback
- debian/patches/CVE-2026-74860.patch: do not Py_DECREF() the attribute
name string after PyList_SetItem() has stolen its reference in
pythonAttributeDecl() in python/libxml.c
- CVE-2026-74860
Updated packages:
-
libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
sha:a66a3fd82a8c9b6efb9a54ff1eec59dced6ac72b
-
libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
sha:9f049858afccce6d45aba7ec18d419d979e8697c
-
libxml2-doc_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_all.deb
sha:281ffcfd16eff79084ffb992f1d7728c32cd3f7b
-
libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
sha:4a2b16e337a974399fffac3143e80b7d758d4268
-
python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
sha:600254888c7efce92e3abb47418e93af294d5612
-
python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
sha:706042322704cc1d9ffd680b5ae7eb6dd1766d84
-
libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
sha:964055ea6159ebfd443899eaf7f3c27aec5367e9
-
libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
sha:ecc1894dfb4fbad10f9b45f31f662ad76b816e4f
-
libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
sha:a64a5bafec94fa4ed295ea7bef60a6de21dc6c5b
-
python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
sha:96d952385475e3278f0f607a0d93e94628444483
-
python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
sha:5a8e5faebe272fd02f554af9b75b15d1d0a3cf0a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
