[CLSA-2026:1791458028] libxml2: Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-08 11:14:04 UTC
Description:
- CVE-2026-0989: limit the RelaxNG include depth - CVE-2026-0990: prevent unbounded recursion in catalog URI resolution - CVE-2026-0992: ignore repeated nextCatalog entries in XML catalogs - CVE-2025-8732: limit SGML catalog include depth, skip repeated CATALOG entries - CVE-2025-27113: fix compilation of the explicit child axis in patterns
CVEs fixed:
Updated packages:
  • libxml2-2.9.13-14.el9_8.5.tuxcare.els1.aarch64.rpm
    sha:a553b78680eb63050d24ab488d55cc70a13fb6b440025950fa2e10c26bef36e2
  • libxml2-2.9.13-14.el9_8.5.tuxcare.els1.i686.rpm
    sha:af9f315a8fe64aa93c321d9b992538a19240c8003bb32bc7eed9a287251371bf
  • libxml2-2.9.13-14.el9_8.5.tuxcare.els1.x86_64.rpm
    sha:d7fabdaae23ca81ffea136eb706a0da2b8de354ab92eee8f6dd858e5714bbab2
  • libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els1.aarch64.rpm
    sha:cb3ea639c6e18f0f71f433a82ee71f7c4b3a551e47ffbae8655ef7b3c64e80d4
  • libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els1.i686.rpm
    sha:f3bb371ed1338d8f8cb32a6867f26526e206fe0f954196c2de941020c0c67f42
  • libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els1.x86_64.rpm
    sha:4d38f854d99b585e187585faa08dc4590b187254e74caad7f61c702088a70712
  • libxml2-static-2.9.13-14.el9_8.5.tuxcare.els1.aarch64.rpm
    sha:b93880eb16b8fea2b8cf5c9d8b4c2feaf61628c829a5e83e00c5dde56ab79de3
  • libxml2-static-2.9.13-14.el9_8.5.tuxcare.els1.i686.rpm
    sha:8839b63c713450be04036db915cc1b120655bb0d469faa7149895ec47ecdb581
  • libxml2-static-2.9.13-14.el9_8.5.tuxcare.els1.x86_64.rpm
    sha:e519169fd4e5e1c8669ecc98c1331202a8f41f84ae372725e0bc1fc359a75709
  • python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els1.aarch64.rpm
    sha:f256afadcdbc67b99b59f917631c7ff740e6ab41cd16746c93772cb0339aba2d
  • python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els1.i686.rpm
    sha:5ed889540f5454c28d30de321316bc66c849b3e9bc3b99b4873f6da43de3db2a
  • python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els1.x86_64.rpm
    sha:06c7ced88e16a2746335e08df522a36866c0686bcfc1883d84d6028aa2802bd8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.