Red Hat Security AdvisoryRHSA-2025:10630
libxml2 security update
Released 2025-07-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) libxml2-devel-2.12.5-7.el10_0
- Red Hat Enterprise Linux BaseOS (v. 10) libxml2-2.12.5-7.el10_0, python3-libxml2-2.12.5-7.el10_0
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libxml2-static-2.12.5-7.el10_0
Fixes 4 records
Priority HIGH 72
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01367 · Published 2025-06-12 · Partial fix · 2.14.4, 2.12.5-7.el10_0 +21 CWE-787
Priority MEDIUM 48
A vulnerability was found in libxml2.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01558 · Published 2025-06-16 · Partial fix · 2.15.0, 2.12.5-7.el10_0 +34 CWE-125
Priority MEDIUM 47
A use-after-free vulnerability was found in libxml2.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00833 · Published 2025-06-16 · Partial fix · 2.15.0, 2.12.5-7.el10_0 +33 CWE-825
Priority MEDIUM 40
A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00592 · Published 2025-06-16 · Partial fix · 2.14.5, 2.12.5-7.el10_0 +1 CWE-825
