Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:61247

Опубликовано: 31 авг. 2026
Источник: rocky
Оценка: Moderate

Описание

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653)

  • libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
libxml2aarch6414.el9_8.4libxml2-2.9.13-14.el9_8.4.aarch64.rpm
python3-libxml2aarch6414.el9_8.4python3-libxml2-2.9.13-14.el9_8.4.aarch64.rpm
libxml2i68614.el9_8.4libxml2-2.9.13-14.el9_8.4.i686.rpm
libxml2x86_6414.el9_8.4libxml2-2.9.13-14.el9_8.4.x86_64.rpm
python3-libxml2x86_6414.el9_8.4python3-libxml2-2.9.13-14.el9_8.4.x86_64.rpm

Показывать по

Связанные CVE

CVE-2026-11979
CVE-2026-6653

Ссылки на источники

Исправления

Связанные уязвимости

oracle-oval логотип

ELSA-2026-61247-0

oracle-oval
2 месяца назад

ELSA-2026-61247-0: libxml2 security update (MODERATE)

ubuntu логотип

CVE-2026-6653

CVSS3: 9.8
ubuntu
5 месяцев назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

redhat логотип

CVE-2026-6653

CVSS3: 5.9
redhat
5 месяцев назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

nvd логотип

CVE-2026-6653

CVSS3: 9.8
nvd
5 месяцев назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

debian логотип

CVE-2026-6653

CVSS3: 9.8
debian
5 месяцев назад

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 ...