Red Hat Security Advisory

RHSA-2026:61248

libxml2 security update

Released 2026-08-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libxml2-devel-2.9.7-21.el8_10.7
Red Hat Enterprise Linux BaseOS (v. 8) libxml2-2.9.7-21.el8_10.7, python3-libxml2-2.9.7-21.el8_10.7

TI-2026-10322 CVE-2026-11979 · GHSA-h67q-h62w-5mjr

LOW 9

libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode.

CVSS 4.0LOW 1.8 Local No auth User interaction EPSS 0.00148 Published 2026-06-29 Partial fix CWE-121