High RHSA-2025:13464 1 CVE

Red Hat Security Advisory: libxml2 security update

Published Aug 8, 2025 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 5

Release	Package	Fixed in
Red Hat · RHEL 7 ELS rhel_els:7	libxml2	0:2.9.1-6.el7_9.12
Red Hat · RHEL 7 ELS rhel_els:7	libxml2-debuginfo	0:2.9.1-6.el7_9.12
Red Hat · RHEL 7 ELS rhel_els:7	libxml2-devel	0:2.9.1-6.el7_9.12
Red Hat · RHEL 7 ELS rhel_els:7	libxml2-python	0:2.9.1-6.el7_9.12
Red Hat · RHEL 7 ELS rhel_els:7	libxml2-static	0:2.9.1-6.el7_9.12

Vulnerabilities 1

High 7.8

CVE-2025-7425

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attr…

Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Wolfi

Jul 10, 2025

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2379274
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13464.json
report
https://access.redhat.com/security/cve/CVE-2025-7425
advisory
https://www.cve.org/CVERecord?id=CVE-2025-7425
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-7425
article
https://gitlab.gnome.org/GNOME/libxslt/-/issues/140