Red Hat Security AdvisoryRHSA-2026:22420
libxml2 security update
Released 2026-06-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) libxml2-2.9.1-6.el7_9.14, libxml2-2.9.1-6.el7_9.14.ppc, libxml2-devel-2.9.1-6.el7_9.14 +2
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) libxml2-static-2.9.1-6.el7_9.14, libxml2-static-2.9.1-6.el7_9.14.ppc
Fixes 1 record
Priority LOW 27
Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00159 · Published 2025-09-10 · Partial fix · 2.10.0, 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3 +6 CWE-674
