Red Hat Security AdvisoryRHSA-2025:13688
libxml2 security update
Released 2025-08-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) libxml2-devel-2.9.7-13.el8_6.12
- Red Hat Enterprise Linux AppStream E4S (v.8.6) libxml2-devel-2.9.7-13.el8_6.12
- Red Hat Enterprise Linux AppStream TUS (v.8.6) libxml2-devel-2.9.7-13.el8_6.12
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) libxml2-2.9.7-13.el8_6.12, python3-libxml2-2.9.7-13.el8_6.12
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) libxml2-2.9.7-13.el8_6.12, python3-libxml2-2.9.7-13.el8_6.12
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) libxml2-2.9.7-13.el8_6.12, python3-libxml2-2.9.7-13.el8_6.12
Fixes 1 record
Priority HIGH 66
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0059 · Published 2025-04-17 · Partial fix · 2.13.8, 2.14.2 CWE-1284