libxml2-2.9.7-21.el8_10.2

エラータID: AXSA:2025-10691:12

Release date: 
Monday, August 4, 2025 - 21:08
Subject: 
libxml2-2.9.7-21.el8_10.2
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (CVE-2025-7425)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-7425
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.

Solution: 

Update packages.

CVEs: 
CVE-2025-7425
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.
Additional Info: 

N/A

Download: 

SRPMS
  1. libxml2-2.9.7-21.el8_10.2.src.rpm
    MD5: 2f1a4978647d3ad0a9c1aa683ee8f407
    SHA-256: 6387be33837b184683d199ae058f6dd04a57e72e6abd79733700b8676fc4367f
    Size: 5.24 MB

Asianux Server 8 for x86_64
  1. libxml2-2.9.7-21.el8_10.2.i686.rpm
    MD5: 4817d54685c06730215cf97feaa064e9
    SHA-256: cc8b4eacd13c79e85c65eaed1ac904e3ae1ebb1dc833049bdc915e6ce0a5b0d0
    Size: 741.26 kB
  2. libxml2-2.9.7-21.el8_10.2.x86_64.rpm
    MD5: ff9513d8b462eb26f0ee36ca9176496f
    SHA-256: 23c55b114a83b6f56d94925005cc5d0f584fcae7d3f666595168ee56e7669c9f
    Size: 696.56 kB
  3. libxml2-devel-2.9.7-21.el8_10.2.i686.rpm
    MD5: 141766e45dc7a2440fd771567e142e40
    SHA-256: ac3d0201022da9c5646166107291ba37e7928189a6a9bcd9e6dca1233e70b818
    Size: 1.04 MB
  4. libxml2-devel-2.9.7-21.el8_10.2.x86_64.rpm
    MD5: 0d463e0dd558825d17da8f6795443a22
    SHA-256: 118ec67558215cfb407aa0ae8e36fb81b25c1a6d0aee5a3928feb1949d84c7ce
    Size: 1.04 MB
  5. python3-libxml2-2.9.7-21.el8_10.2.x86_64.rpm
    MD5: 9589560f3c2beab378a31872b5bc6cba
    SHA-256: 3431a5de2a7b6d32fd5b1182a03381c962bd50517f95089e9917cd8c930b066b
    Size: 237.46 kB