Summary
[2.9.7-21.4]
- Fix CVE-2025-9714 (RHEL-119279)
[2.9.7.21.3]
- Fix CVE-2025-32415 (RHEL-100177)
[2.9.7.21.2]
- Fix CVE-2025-7425 (RHEL-102797)
[2.9.7-21.1]
- Fix CVE-2025-6021 (RHEL-96498)
- Fix CVE-2025-49794 (RHEL-96398)
- Fix CVE-2025-49796 (RHEL-96424)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libxml2 | 0:2.9.7-21.el8_10.4 |
| Oracle Linux · 8 | libxml2-devel | 0:2.9.7-21.el8_10.4 |
| Oracle Linux · 8 | python3-libxml2 | 0:2.9.7-21.el8_10.4 |
Vulnerabilities 1
-
Medium 6.2
Stack overflow in libxml2
Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` wer…