[CLSA-2026:1781620499] libxml2: Fix of CVE-2025-9714
Type:
security
Severity:
Moderate
Release date:
2026-06-16 14:35:13 UTC
Description:
- CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely
CVEs fixed:
Updated packages:
  • libxml2-2.9.1-6.amzn2.5.24.tuxcare.els2.i686.rpm
    sha:9f9a9c7301ce55af00873b7a1c0ff3dec0783d73eaec93eafa45f1568215a3a0
  • libxml2-2.9.1-6.amzn2.5.24.tuxcare.els2.x86_64.rpm
    sha:d74dea2eae2e55acf6af5468999842791df61f6d78e9c34491fc97ae7f2e791c
  • libxml2-devel-2.9.1-6.amzn2.5.24.tuxcare.els2.x86_64.rpm
    sha:637eea85f89b16d3f8901a828e45a0ec1b953fe1309b5105ba173c42d77392a8
  • libxml2-python-2.9.1-6.amzn2.5.24.tuxcare.els2.x86_64.rpm
    sha:19d0e74bd07d1ae48d5c9726f161ca0fa82b1a7b38af6bafbfa7ac8dea243b19
  • libxml2-static-2.9.1-6.amzn2.5.24.tuxcare.els2.x86_64.rpm
    sha:3421e3816724f7708cc1d09d03950ff222d3f1fa7f497fe0e9c28b5e36974878
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.