High ELSA-2025-2686 2 CVEs

Important: libxml2 security update (Oracle Linux 8)

Published Mar 12, 2025 · Updated Mar 12, 2025

Ecosystem: Oracle Linux

Summary

[2.9.7-19]
- Fix CVE-2024-56171 (RHEL-80122)
- Fix CVE-2025-24928 (RHEL-80137)

[2.9.7.18.2]
- Fix CVE-2022-49043 (RHEL-76289)

[2.9.7-18.1]
- Fix CVE-2024-25062 (RHEL-31056)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	libxml2	0:2.9.7-19.el8_10
Oracle Linux · 8	libxml2-devel	0:2.9.7-19.el8_10
Oracle Linux · 8	python3-libxml2	0:2.9.7-19.el8_10

Vulnerabilities 2

High 7.8

CVE-2024-56171

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleI…

xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 18, 2025
High 7.8

CVE-2025-24928

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To…

xmlsoft libxml2 qt6-qtwebengine libxml2 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 18, 2025