Описание
ELSA-2026-69655: libxml2 security, bug fix, and enhancement update (MODERATE)
[2.9.7-21.8]
- Lower xpath recursion limits (RHEL-249282)
[2.9.7-21.8]
- Fix CVE-2026-6653 (RHEL-215616)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
libxml2
2.9.7-21.el8_10.8
libxml2-devel
2.9.7-21.el8_10.8
python3-libxml2
2.9.7-21.el8_10.8
Oracle Linux x86_64
libxml2
2.9.7-21.el8_10.8
libxml2-devel
2.9.7-21.el8_10.8
python3-libxml2
2.9.7-21.el8_10.8
Связанные CVE
Связанные уязвимости
Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.
Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.
Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.
Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 ...