Skip to content
OpenAdvisories
Medium ELSA-2025-22376 1 CVE

Moderate: libxml2 security update (Oracle Linux 9)

Published Dec 1, 2025 · Updated Dec 1, 2025

Ecosystem: Oracle Linux

Summary

[2.9.13-14]
- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)

[2.9.13-13]
- Fix CVE-2025-9714 (RHEL-119283)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 libxml2 0:2.9.13-14.el9_7
Oracle Linux · 9 libxml2-devel 0:2.9.13-14.el9_7
Oracle Linux · 9 python3-libxml2 0:2.9.13-14.el9_7

Vulnerabilities 1

  • Medium 6.2
    CVE-2025-9714

    Stack overflow in libxml2

    Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` wer…

    libxml2 libxml2 libxml2 libxml2 Debian Ubuntu