ALSA-2025:10630 — Important: libxml2 security update

Affected: AlmaLinux:10: libxml2, AlmaLinux:10: libxml2-devel, AlmaLinux:10: libxml2-static, AlmaLinux:10: python3-libxml2

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794) * libxml: Null pointer dereference leads to Denial of service (DoS) (CVE-2025-49795) * libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796) * libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-49795 — Libxml: null pointer dereference leads to denial of service (dos)

Affected: GNOME libxml2, Red Hat Enterprise Linux 10, Red Hat Hardened Images, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Siemens RUGGEDCOM RST2428P

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.

Most recent entries from all

ALSA-2025:10630 — Important: libxml2 security update

CVE-2025-49795 — Libxml: null pointer dereference leads to denial of service (dos)