Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-69655

Опубликовано: 23 сент. 2026
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2026-69655: libxml2 security, bug fix, and enhancement update (MODERATE)

[2.9.7-21.8]

  • Lower xpath recursion limits (RHEL-249282)

[2.9.7-21.8]

  • Fix CVE-2026-6653 (RHEL-215616)

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

libxml2

2.9.7-21.el8_10.8

libxml2-devel

2.9.7-21.el8_10.8

python3-libxml2

2.9.7-21.el8_10.8

Oracle Linux x86_64

libxml2

2.9.7-21.el8_10.8

libxml2-devel

2.9.7-21.el8_10.8

python3-libxml2

2.9.7-21.el8_10.8

Связанные CVE

Связанные уязвимости

CVSS3: 9.8
ubuntu
5 месяцев назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

CVSS3: 5.9
redhat
5 месяцев назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

CVSS3: 9.8
nvd
5 месяцев назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

CVSS3: 9.8
debian
5 месяцев назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 ...

CVSS3: 7
redos
около 2 месяцев назад

Уязвимость libxml2