Red Hat Bug Fix Advisory: libxml2 bug fix and enhancement update

Fixed packages 7

Vulnerabilities 3

• Critical 9.1
  CVE-2024-40896

  In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for extern…

  libxml2 libxml2 libxml2 openjdk-7-jre Azure Linux Wolfi
  Dec 23, 2024
• High 7.8
  CVE-2024-56171

  libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleI…

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 18, 2025
• High 7.8
  CVE-2025-24928

  libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To…

  xmlsoft libxml2 qt6-qtwebengine libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 18, 2025

References

• article
  https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.0_release_notes/index
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_6597.json
• report
  https://access.redhat.com/security/cve/CVE-2024-40896
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2333871
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-40896
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-40896
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/commit/1a8932303969907f6572b1b6aac4081c56adb5c6
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/issues/761
• report
  https://access.redhat.com/security/cve/CVE-2024-56171
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2346416
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-56171
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-56171
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/issues/828
• report
  https://access.redhat.com/security/cve/CVE-2025-24928
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2346421
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-24928
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-24928
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/issues/847
• article
  https://issues.oss-fuzz.com/issues/392687022