Red Hat Security Advisory

RHSA-2025:13203

libxml2 security update

Released 2025-08-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libxml2-devel-2.9.7-21.el8_10.3
Red Hat Enterprise Linux BaseOS (v. 8) libxml2-2.9.7-21.el8_10.3, python3-libxml2-2.9.7-21.el8_10.3

TI-2025-23491 CVE-2025-32415 · GHSA-w8fw-fj9q-vcjj

HIGH 66

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0059 Published 2025-04-17 Partial fix · 2.13.8, 2.14.2 CWE-1284