RLSA-2026:69655

Security

Mirrored from RHSA-2026:69655

Issued at: 2026-09-23

Updated at: 2026-09-23

Advisory content derived from Red Hat RHSA-2026:69655, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Moderate: libxml2 security, bug fix, and enhancement update

Description

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653)

Bug Fix(es) and Enhancement(s):

* libxml2: CVE-2025-9714 fix (Rocky Linux-119279) backported wrong upstream commit ? dyn:map recursion still crashes (JIRA:Rocky Linux-249282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64

Rocky Linux 8 x86_64

Fixes

2491354

CVEs

CVE-2026-6653

Affected packages

Rocky Linux 8 aarch64 - BaseOS

libxml2-0:2.9.7-21.el8_10.8.aarch64.rpm

libxml2-0:2.9.7-21.el8_10.8.src.rpm

libxml2-debuginfo-0:2.9.7-21.el8_10.8.aarch64.rpm

libxml2-debugsource-0:2.9.7-21.el8_10.8.aarch64.rpm

python3-libxml2-0:2.9.7-21.el8_10.8.aarch64.rpm

python3-libxml2-debuginfo-0:2.9.7-21.el8_10.8.aarch64.rpm

Rocky Linux 8 x86_64 - BaseOS

libxml2-0:2.9.7-21.el8_10.8.i686.rpm

libxml2-0:2.9.7-21.el8_10.8.src.rpm

libxml2-0:2.9.7-21.el8_10.8.x86_64.rpm

libxml2-debuginfo-0:2.9.7-21.el8_10.8.i686.rpm

libxml2-debuginfo-0:2.9.7-21.el8_10.8.x86_64.rpm

libxml2-debugsource-0:2.9.7-21.el8_10.8.i686.rpm

libxml2-debugsource-0:2.9.7-21.el8_10.8.x86_64.rpm

python3-libxml2-0:2.9.7-21.el8_10.8.x86_64.rpm

python3-libxml2-debuginfo-0:2.9.7-21.el8_10.8.x86_64.rpm

Rocky Linux 8 aarch64 - AppStream

libxml2-devel-0:2.9.7-21.el8_10.8.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

libxml2-devel-0:2.9.7-21.el8_10.8.i686.rpm

libxml2-devel-0:2.9.7-21.el8_10.8.x86_64.rpm