A security update for Red Hat Hardened Images RPMs addresses multiple issues in the libxml2 library, including a heap-based underflow vulnerability that can cause denial of service when processing crafted XML documents against certain XML schemas. The vulnerability requires processing of malicious XML files by applications linked to libxml2. The update includes new versions of libxml2 packages for aarch64 and x86_64 architectures. No exploits in the wild are currently known.

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This update includes the following RPMs:

libxml2:
  * libxml2-16-2.15.2-0.3.hum1 (aarch64, x86_64)
  * libxml2-2.15.2-0.3.hum1 (aarch64, x86_64)
  * libxml2-devel-2.15.2-0.3.hum1 (aarch64, x86_64)
  * libxml2-static-2.15.2-0.3.hum1 (aarch64, x86_64)
  * python3-libxml2-2.15.2-0.3.hum1 (aarch64, x86_64)
  * libxml2-2.15.2-0.3.hum1.src (src)

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP2 security update

Red Hat OpenShift Container Platform 4.13.60 includes multiple security fixes addressing vulnerabilities in components such as libxslt, sudo, git, libxml2, and jq. These vulnerabilities include heap use-after-free, local privilege escalation, arbitrary code execution, arbitrary file writes, integer overflow leading to stack buffer overflow, and out-of-bounds reads. Users of OpenShift Container Platform 4.13 are advised to upgrade to the updated container images when available to mitigate these issues.

Red Hat Security Advisory: OpenShift Container Platform 4.13.60 bug fix and security update

Red Hat OpenShift Container Platform 4.12.80 includes important security updates addressing multiple vulnerabilities in components such as libxslt, git, and libxml2. These issues include heap use-after-free, arbitrary code execution, integer overflow leading to stack buffer overflow, and out-of-bounds reads. Users of OpenShift Container Platform 4.12 are advised to upgrade to the updated packages and container images to mitigate these vulnerabilities.

Red Hat Security Advisory: OpenShift Container Platform 4.12.80 bug fix and security update

Red Hat OpenShift Container Platform 4.15.57 includes important security fixes addressing multiple vulnerabilities in components such as libxslt, git, libxml2, and jq. These issues include heap use-after-free, arbitrary code execution, arbitrary file writes, integer overflow leading to stack buffer overflow, and stack buffer overflow. Users of OpenShift Container Platform 4.15 are advised to upgrade to the updated packages and container images to mitigate these vulnerabilities.

Red Hat Security Advisory: OpenShift Container Platform 4.15.57 bug fix and security update

Red Hat OpenShift Container Platform 4.17.38 includes important security fixes addressing multiple vulnerabilities in components such as libxslt, git, and libxml2. These vulnerabilities include heap use-after-free, arbitrary code execution, arbitrary file writes, integer overflow leading to stack buffer overflow, and out-of-bounds reads. Users of OpenShift Container Platform 4.17 are advised to upgrade to the updated packages and container images to mitigate these issues.

Red Hat Security Advisory: OpenShift Container Platform 4.17.38 bug fix and security update

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include an out-of-bounds read, heap use-after-free, type confusion, and an integer overflow leading to a stack buffer overflow. The issues can lead to denial of service or potential memory corruption. Red Hat has issued an important security advisory with updates to address these flaws.

Red Hat Security Advisory: libxml2 security update

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 8.8. These include out-of-bounds read, heap use-after-free, type confusion, and an integer overflow leading to a stack buffer overflow. The issues can cause denial of service or memory corruption. Red Hat has released security updates addressing these vulnerabilities.

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 8.4, including out-of-bounds read, heap use after free, type confusion, and integer overflow leading to stack buffer overflow. These issues can cause denial of service or memory corruption. Red Hat has issued an important security advisory with updates to address these flaws.

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 8.2. These include out-of-bounds read, heap use-after-free, type confusion, and an integer overflow leading to a stack buffer overflow. These issues can lead to denial of service or memory corruption. Red Hat has issued a security advisory with updates to address these vulnerabilities.

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 9.2. These include a heap use-after-free, type confusion, and an integer overflow leading to a stack buffer overflow. The issues can cause denial of service (DoS) conditions and potential memory corruption. Red Hat has released security updates addressing these vulnerabilities.

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 8.6. These include an out-of-bounds read, heap use-after-free leading to denial of service, type confusion causing denial of service, and an integer overflow resulting in a stack buffer overflow. Red Hat has released security updates addressing these issues.

Multiple security vulnerabilities have been identified in the libxml2 library, including heap use-after-free, type confusion, and an integer overflow leading to a stack buffer overflow. These issues can cause denial of service (DoS) conditions. Red Hat has released security updates addressing these flaws in libxml2 for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 9.4 Extended Update Support. These include a heap use-after-free and a type confusion vulnerability, both leading to denial of service (DoS), and an integer overflow in the xmlBuildQName() function that results in a stack buffer overflow. Red Hat has issued an important security advisory with updates to address these issues.

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 9. These include a heap use-after-free and type confusion, both leading to denial of service, and an integer overflow in the xmlBuildQName() function that can cause a stack buffer overflow. Red Hat has issued an important security advisory with updates to address these issues.

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 8. These include a heap use-after-free and type confusion, both leading to denial of service (DoS), and an integer overflow in the xmlBuildQName() function that results in a stack buffer overflow. Red Hat has issued an important security advisory with updates to address these issues.

Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 10. These include heap use-after-free, null pointer dereference, type confusion, and an integer overflow leading to a stack buffer overflow. The issues can cause denial of service (DoS) conditions and potentially memory corruption. Red Hat has released security updates addressing these flaws.

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Search: CVE-2025-6021