Red Hat Security AdvisoryRHSA-2026:80675
libxml2 security update
Released 2026-10-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) libxml2-devel-2.9.7-21.el8_10.10
- Red Hat Enterprise Linux BaseOS (v. 8) libxml2-2.9.7-21.el8_10.10, python3-libxml2-2.9.7-21.el8_10.10
Fixes 1 record
Priority LOW 35
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00157 · Published 2026-09-05 · Partial fix · 2.15.4 CWE-122
