Skip to content
OpenAdvisories
Low RHSA-2026:60394 1 CVE

Red Hat Security Advisory: libxml2 security update

Published Aug 27, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.2 libxml2 0:2.12.5-10.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 libxml2-debuginfo 0:2.12.5-10.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 libxml2-debugsource 0:2.12.5-10.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 libxml2-devel 0:2.12.5-10.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 libxml2-static 0:2.12.5-10.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 python3-libxml2 0:2.12.5-10.el10_2.3
Red Hat · RHEL 10 enterprise_linux:10.2 python3-libxml2-debuginfo 0:2.12.5-10.el10_2.3

Vulnerabilities 1

  • Low 1.8
    CVE-2026-11979

    Stack-Based Buffer Overflow in libxml2

    libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell() function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long inp…

    xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2494191
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60394.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-11979
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-11979
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-11979
  • article
    https://cert.pl/en/posts/2026/06/CVE-2026-11979
  • article
    https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e