Release date:
2026-10-02 09:13:48 UTC
Description:
- CVE-2025-7425: clear the attribute type through the live attr argument in
xmlRemoveID() instead of id->attr, which read the xmlID already freed by
xmlHashRemoveEntry()
- CVE-2022-23308: normalize the ID value in xmlRemoveID() after it is read
from the attribute instead of before, where the pointer was uninitialized
Updated packages:
-
libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els2.i686.rpm
sha:a88fbbc1fc24adba202192804a53f4e0172d7d672127e8e1a8d068702d0d3362
-
libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els2.x86_64.rpm
sha:5b18b2ecc4990d4dd1418442a0f25b235e1376c4e8659e3d20f84ffa1656b0b9
-
libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els2.i686.rpm
sha:9b715e15f97bcfabc5b5a4bcf3e1ea9295bccec93f058170e17d45bfab555e36
-
libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els2.x86_64.rpm
sha:9040e847b536f43754e75f5e2ed1d981c2243c5662ca6d86607ffdf2dbe005b2
-
libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els2.i686.rpm
sha:fe6c3ff80eda0cc7a955161ff83facd2c9fe5343a5a8061ef3b047d72fb6fbbd
-
libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els2.x86_64.rpm
sha:7d32ce0d1ee07982748221207ec0a78368b14f7b129df9ab005b6c6b51c26b79
-
libxml2-static-2.9.1-6.0.13.el7_9.6.tuxcare.els2.i686.rpm
sha:612b1aa1e5eb122f115cdfa3627c88848f788438f285eda5f4a4fdb8c977858a
-
libxml2-static-2.9.1-6.0.13.el7_9.6.tuxcare.els2.x86_64.rpm
sha:ee81d710acee7eb4d9b5aab902fd6588de306dd832182bef52c1410f6957eda5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
