Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:10630

Опубликовано: 03 окт. 2025
Источник: rocky
Оценка: Important

Описание

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794)

  • libxml: Null pointer dereference leads to Denial of service (DoS) (CVE-2025-49795)

  • libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796)

  • libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
libxml2x86_647.el10_0libxml2-2.12.5-7.el10_0.x86_64.rpm
python3-libxml2x86_647.el10_0python3-libxml2-2.12.5-7.el10_0.x86_64.rpm

Показывать по

Связанные уязвимости

oracle-oval
3 месяца назад

ELSA-2025-10630: libxml2 security update (IMPORTANT)

suse-cvrf
3 месяца назад

Security update for libxml2

suse-cvrf
3 месяца назад

Security update for libxml2

rocky
3 месяца назад

Important: libxml2 security update

oracle-oval
3 месяца назад

ELSA-2025-10699: libxml2 security update (IMPORTANT)