Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:10699

Опубликовано: 04 окт. 2025
Источник: rocky
Оценка: Important

Описание

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794)

  • libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796)

  • libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
libxml2i68610.el9_6libxml2-2.9.13-10.el9_6.i686.rpm
libxml2x86_6410.el9_6libxml2-2.9.13-10.el9_6.x86_64.rpm
python3-libxml2x86_6410.el9_6python3-libxml2-2.9.13-10.el9_6.x86_64.rpm

Показывать по

Связанные уязвимости

rocky
5 месяцев назад

Important: libxml2 security update

oracle-oval
5 месяцев назад

ELSA-2025-10699: libxml2 security update (IMPORTANT)

oracle-oval
5 месяцев назад

ELSA-2025-10698: libxml2 security update (IMPORTANT)

suse-cvrf
5 месяцев назад

Security update for libxml2

suse-cvrf
5 месяцев назад

Security update for libxml2