Red Hat Security Advisory

RHSA-2026:61247

libxml2 security update

Released 2026-08-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libxml2-devel-2.9.13-14.el9_8.4
Red Hat Enterprise Linux BaseOS (v. 9) libxml2-2.9.13-14.el9_8.4, python3-libxml2-2.9.13-14.el9_8.4

Fixes 2 records

TI-2026-05839 CVE-2026-6653 · GHSA-v4qw-p44r-qhfg

libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling

LOW 31

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handl…

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00355 Published 2026-06-22 Partial fix · 2.11.0 CWE-416

TI-2026-10322 CVE-2026-11979 · GHSA-h67q-h62w-5mjr

Stack-Based Buffer Overflow in libxml2

LOW 9

libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode.

CVSS 4.0LOW 1.8 Local No auth User interaction EPSS 0.00148 Published 2026-06-29 Partial fix CWE-121