Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 5

Vulnerabilities 13

• Critical 9.1
  CVE-2025-49794

  Libxml: heap use after free (uaf) leads to denial of service (dos)

  A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Jun 16, 2025
• Critical 9.1
  CVE-2025-49796

  Libxml: type confusion leads to denial of service (dos)

  A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Jun 16, 2025
• High 7.5
  CVE-2025-49795

  Libxml: null pointer dereference leads to denial of service (dos)

  A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.

  Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Ubuntu Azure Linux Alpine
  Jun 16, 2025
• High 7.5
  CVE-2025-6021

  Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

  A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Jun 12, 2025
• Medium 6.2
  CVE-2025-9714

  Stack overflow in libxml2

  Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` wer…

  libxml2 libxml2 libxml2 libxml2 Debian Ubuntu
  Sep 10, 2025
• Medium 6.2
  CVE-2026-1757

  Libxml2: memory leak leading to local denial of service in xmllint interactive shell

  A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program s…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Feb 2, 2026
• Medium 5.9
  CVE-2026-0990

  Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

  A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this config…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jan 15, 2026
• Medium 5.6
  CVE-2025-32414

  In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bind…

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 8, 2025
• Medium 5.5
  CVE-2025-26434

  In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information discl…

  Google Android Android
  Sep 5, 2025
• Low 3.7
  CVE-2026-0989

  Libxml2: unbounded relaxng include recursion leading to stack overflow

  A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can ca…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jan 15, 2026
• Low 2.9
  CVE-2025-32415

  In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer u…

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 17, 2025
• Low 2.9
  CVE-2026-0992

  Libxml2: libxml2: denial of service via crafted xml catalogs

  A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by suppl…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jan 15, 2026
• Low 2.5
  CVE-2025-6170

  Libxml2: stack buffer overflow in xmllint interactive shell command handling

  A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attacker…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jun 16, 2025

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2025-32415
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2025-32414
• report
  https://access.redhat.com/security/cve/CVE-2025-6170
• report
  https://access.redhat.com/security/cve/CVE-2025-6021
• report
  https://access.redhat.com/security/cve/CVE-2025-49796
• report
  https://access.redhat.com/security/cve/CVE-2025-49795
• report
  https://access.redhat.com/security/cve/CVE-2025-49794
• report
  https://access.redhat.com/security/cve/CVE-2025-9714
• report
  https://access.redhat.com/security/cve/CVE-2025-26434
• report
  https://access.redhat.com/security/cve/CVE-2026-0992
• report
  https://access.redhat.com/security/cve/CVE-2026-0990
• report
  https://access.redhat.com/security/cve/CVE-2026-0989
• report
  https://access.redhat.com/security/cve/CVE-2026-1757
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7519.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2372406
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-6021
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-6021
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/issues/926
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2372952
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-6170
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-6170
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/issues/941
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2392605
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-9714
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-9714
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/commit/677a42645ef22b5a50741bad5facf9d8a8bc6d21
• article
  https://gitlab.gnome.org/GNOME/libxslt/-/issues/148
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2393475
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-26434
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-26434
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/commit/5e7874015ef5ed8b2705eb2f7b0960f56f7760ea
• article
  https://security-tracker.debian.org/tracker/CVE-2025-26434
• article
  https://source.android.com/security/bulletin/android-16
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2358121
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-32414
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-32414
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/issues/889