[CLSA-2026:1792537548] Fix CVE(s): CVE-2025-49794, CVE-2025-49796, CVE-2025-7425
Type:
security
Severity:
Critical
Release date:
2026-10-26 13:47:24 UTC
Description:
* SECURITY UPDATE: double free in the Python bindings' SAX attributeDecl callback - debian/patches/CVE-2026-74860.patch: do not Py_DECREF() the attribute name string after PyList_SetItem() has stolen its reference in pythonAttributeDecl() in python/libxml.c - CVE-2026-74860
CVEs fixed:
Updated packages:
  • libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
    sha:9bfe2ee83c99e6bf50834f206e86271ca05ec8dd
  • libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
    sha:92a2fedfa8f6b1222767b2ea1fe152a08a0a009f
  • libxml2-doc_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_all.deb
    sha:ee0d2ff1dd83e2a314c795ea4eebff4fd0d3f5e8
  • libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
    sha:5ad345eb9c059288e10e31d952aa817ca1cfd32c
  • python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
    sha:a79dd53f86d8d9a4f1da78b29fb9a72546d07cf2
  • python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_amd64.deb
    sha:2df31d7c98db650ae4ac145fe9d7a9335c84581d
  • libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
    sha:005128510273bebcc481df8a42f23d8423af3ec0
  • libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
    sha:184bb491a699a122d78d0c522a5c4ac3c53b08e7
  • libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
    sha:baa947f5188b0bfe94b48216470e1cf7b046be03
  • python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
    sha:6db558ff61d2bf04ec307f6cb22cff482a3e9b88
  • python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_arm64.deb
    sha:90d9e9f0bde0d5e037e2d5f49a63356b73a0d4ef
  • libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_armel.deb
    sha:e68b8d750ebaa818c2ac63d87ae83c99fd96a0fd
  • libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_armel.deb
    sha:90b823dba2a1da30dfeecfad6059b05832952b8c
  • libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_armel.deb
    sha:f36dd36aace7217f3a6cd9a91d886611ca83c8ea
  • python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_armel.deb
    sha:b5de9b446d90be7957117aa077cabf43da0299f2
  • python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els16_armel.deb
    sha:2f1436456adb85dd77cccde62571f80f19e6aa72
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.