VDB
ALSA-2025%3A2686
ALSA-2025%3A2686
PUBLISHED
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml2: Use-After-Free in libxml2 (CVE-2024-56171) * libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 (CVE-2025-24928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | libxml2 | 0, 0 |
| AlmaLinux:8 | python3-libxml2 | 0, 0 |
| AlmaLinux:8 | libxml2-devel | 0, 0 |
Timeline
- Mar 12, 2025 CVE Published
- Mar 17, 2025 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:2686 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-56171 third-party-advisory
- https://access.redhat.com/security/cve/CVE-2025-24928 third-party-advisory
- https://bugzilla.redhat.com/2346416 third-party-advisory
- https://bugzilla.redhat.com/2346421 third-party-advisory
- https://errata.almalinux.org/8/ALSA-2025-2686.html vendor-advisory