RHSA-2025:13267

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow.

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.

Allows modifying some file metadata (e.g.

Perl threads have a working directory race condition where file operations may target unintended paths.

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data".

A vulnerability was found in libxml2.

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.

When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted.