High ELSA-2025-2679 2 CVEs

Important: libxml2 security update (Oracle Linux 9)

Published Mar 12, 2025 · Updated Mar 12, 2025

Ecosystem: Oracle Linux

Summary

[2.9.13-6.2]
- Fix CVE-2024-56171 (RHEL-80128)
- Fix CVE-2025-24928 (RHEL-80143)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	libxml2	0:2.9.13-6.el9_5.2
Oracle Linux · 9	libxml2-devel	0:2.9.13-6.el9_5.2
Oracle Linux · 9	python3-libxml2	0:2.9.13-6.el9_5.2

Vulnerabilities 2

High 7.8

CVE-2024-56171

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleI…

xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 18, 2025
High 7.8

CVE-2025-24928

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To…

xmlsoft libxml2 qt6-qtwebengine libxml2 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 18, 2025