Red Hat Security Advisory

RHSA-2026:14832

libxml2 security update

Released 2026-05-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) libxml2-devel-2.9.7-9.el8_4.9
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) libxml2-devel-2.9.7-9.el8_4.9
Red Hat Enterprise Linux BaseOS AUS (v.8.4) libxml2-2.9.7-9.el8_4.9, python3-libxml2-2.9.7-9.el8_4.9
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) libxml2-2.9.7-9.el8_4.9, python3-libxml2-2.9.7-9.el8_4.9

Fixes 1 record

TI-2025-08904 CVE-2025-9714 · GHSA-fmj5-rvmp-845r

Stack overflow in libxml2

LOW 27

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00159 Published 2025-09-10 Partial fix · 2.10.0, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 +6 CWE-674