[CLSA-2026:1790242323] libxml2: Fix of CVE-2025-9714
Type:
security
Severity:
None
Release date:
2026-09-28 08:48:21 UTC
Description:
- rebase to 2.9.1-6.0.13.el7_9.6 - replace the TuxCare CVE-2025-9714 backport (Patch229) with the vendor's Patch1007, which guards six evaluation paths where ours guarded three - CVE-2025-9714: initialise the XPath maxDepth the vendor's patch adds to upstream's XPATH_MAX_RECURSION_DEPTH instead of INT_MAX, which left every recursion guard it adds unreachable - all other TuxCare CVE patches are unchanged: Patch200-232 remain declared and applied
Updated packages:
  • libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els1.aarch64.rpm
    sha:d0a92424ff10b1827da9227db20d52e136c688197caf90bc5605bf36033bc726
  • libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els1.i686.rpm
    sha:f0d87046d5fd29d3cd34261a18dd1785e793356a9fc8c4b94933d61fe20145d4
  • libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els1.x86_64.rpm
    sha:1c75a586129b2c66f5b4b4d39d2df51de47307cf9d4a0c63498d8cde4ffe6abb
  • libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els1.aarch64.rpm
    sha:4e9bbadd9f5f4a54bedecd88234804d93736c88f4f591beb6b31981fb0281446
  • libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els1.i686.rpm
    sha:fe97b85d8f775b1ae81e26664d79aee75824ca31498eae99a51fa7fa24bfa45a
  • libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els1.x86_64.rpm
    sha:3dd2ca23379ec133353390a07d5e778a20703958c1258a716b37873d63388502
  • libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els1.aarch64.rpm
    sha:14b9bde0a375a57419f6c6946cfca7fbaaecca145c56c874dec21df0694b04e6
  • libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els1.i686.rpm
    sha:3353eb677fcb6fd6198bd2196418ab14da3f2ab6fe26fb85f90908f3c71258cf
  • libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els1.x86_64.rpm
    sha:00981b784521fd61175e820624e2042736f424196e84e3808739afabe151f799
  • libxml2-static-2.9.1-6.0.13.el7_9.6.tuxcare.els1.aarch64.rpm
    sha:d9c79940662dd9bece5cc2f8fad604cb139beec511ed292c47323f7b816b2d00
  • libxml2-static-2.9.1-6.0.13.el7_9.6.tuxcare.els1.i686.rpm
    sha:5529e64e640aa594d0f82f1f5d35ea9dd7c812021ecfd49b1c7d6f21ca7e34f5
  • libxml2-static-2.9.1-6.0.13.el7_9.6.tuxcare.els1.x86_64.rpm
    sha:3054d51075420ae11dc0743f09f1cd1f32e0c4c8d9c798bb37f1edc89f114502
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.