Red Hat 제품 에라타 RHSA-2025:12098 - Security Advisory
발행된 날짜:
2025-07-29
업데이트된 날짜:
2025-07-29

RHSA-2025:12098 - Security Advisory

요약

Important: libxml2 security update

유형/심각도

Security Advisory: Important

Red Hat Lightspeed patch analysis

이 권고의 영향을 받는 시스템을 식별하고 수정합니다.

영향을 받는 시스템 보기

주제

An update for libxml2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

설명

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Out-of-Bounds Read in libxml2 (CVE-2025-32414)
  • libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794)
  • libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796)
  • libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

솔루션

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

영향을 받는 제품

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.6 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

수정

  • BZ - 2358121 - CVE-2025-32414 libxml2: Out-of-Bounds Read in libxml2
  • BZ - 2372373 - CVE-2025-49794 libxml: Heap use after free (UAF) leads to Denial of service (DoS)
  • BZ - 2372385 - CVE-2025-49796 libxml: Type confusion leads to Denial of service (DoS)
  • BZ - 2372406 - CVE-2025-6021 libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6

SRPM
libxml2-2.9.7-13.el8_6.10.src.rpm SHA-256: 1fc83da5ef89cff82b7c48450ae61791b510039131366bab7c71d56976e75cb3
x86_64
libxml2-2.9.7-13.el8_6.10.i686.rpm SHA-256: 0e8786cad079c6b8a348e49050c43ef07b079b6e7ac69f1704bf1ab9f6c3f581
libxml2-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: fba81ca1eea21210aa2493d6ede3e5f0d0c28096ac5908fe1cdd664f04de23a5
libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 46a39932d9008af5cd37ac3dad05703913e0ca2ec80cc81e23c1e094c03bef28
libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 46a39932d9008af5cd37ac3dad05703913e0ca2ec80cc81e23c1e094c03bef28
libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: aadadfd3823988f3fad4162dc369b23896d48a08036d98acbd823e318f88dbe5
libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: aadadfd3823988f3fad4162dc369b23896d48a08036d98acbd823e318f88dbe5
libxml2-debugsource-2.9.7-13.el8_6.10.i686.rpm SHA-256: 9aefa37d908e7ab0ec234cd6987a8853715cdcc709af13f9cf80d674c8aa0d30
libxml2-debugsource-2.9.7-13.el8_6.10.i686.rpm SHA-256: 9aefa37d908e7ab0ec234cd6987a8853715cdcc709af13f9cf80d674c8aa0d30
libxml2-debugsource-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a4be2aaaf5cb3365454e52a01c9ccd84c8e2b28a2c54ed0f08a796753d99cdd
libxml2-debugsource-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a4be2aaaf5cb3365454e52a01c9ccd84c8e2b28a2c54ed0f08a796753d99cdd
libxml2-devel-2.9.7-13.el8_6.10.i686.rpm SHA-256: 61699c95b023f0900b4dbf9a556338083dc59dda8ec82e5a56153a03d6ff1e5c
libxml2-devel-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a284aa978486942cf4940c14039e4210c95388ff7233113052588b46b92e5e1
python3-libxml2-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 4133c3d5a4ec051e07995634f02259cc755feda41b41cd94f5e8cde7e5f09369
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 15a1b54dc4e48243b02496cc5819a16718906e87a26438f5684134a31f59376e
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 15a1b54dc4e48243b02496cc5819a16718906e87a26438f5684134a31f59376e
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: a86b1b21d0a7837c40a684b961709dd168e7b2e396f22c8e73abdb428163b140
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: a86b1b21d0a7837c40a684b961709dd168e7b2e396f22c8e73abdb428163b140

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
libxml2-2.9.7-13.el8_6.10.src.rpm SHA-256: 1fc83da5ef89cff82b7c48450ae61791b510039131366bab7c71d56976e75cb3
x86_64
libxml2-2.9.7-13.el8_6.10.i686.rpm SHA-256: 0e8786cad079c6b8a348e49050c43ef07b079b6e7ac69f1704bf1ab9f6c3f581
libxml2-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: fba81ca1eea21210aa2493d6ede3e5f0d0c28096ac5908fe1cdd664f04de23a5
libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 46a39932d9008af5cd37ac3dad05703913e0ca2ec80cc81e23c1e094c03bef28
libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 46a39932d9008af5cd37ac3dad05703913e0ca2ec80cc81e23c1e094c03bef28
libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: aadadfd3823988f3fad4162dc369b23896d48a08036d98acbd823e318f88dbe5
libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: aadadfd3823988f3fad4162dc369b23896d48a08036d98acbd823e318f88dbe5
libxml2-debugsource-2.9.7-13.el8_6.10.i686.rpm SHA-256: 9aefa37d908e7ab0ec234cd6987a8853715cdcc709af13f9cf80d674c8aa0d30
libxml2-debugsource-2.9.7-13.el8_6.10.i686.rpm SHA-256: 9aefa37d908e7ab0ec234cd6987a8853715cdcc709af13f9cf80d674c8aa0d30
libxml2-debugsource-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a4be2aaaf5cb3365454e52a01c9ccd84c8e2b28a2c54ed0f08a796753d99cdd
libxml2-debugsource-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a4be2aaaf5cb3365454e52a01c9ccd84c8e2b28a2c54ed0f08a796753d99cdd
libxml2-devel-2.9.7-13.el8_6.10.i686.rpm SHA-256: 61699c95b023f0900b4dbf9a556338083dc59dda8ec82e5a56153a03d6ff1e5c
libxml2-devel-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a284aa978486942cf4940c14039e4210c95388ff7233113052588b46b92e5e1
python3-libxml2-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 4133c3d5a4ec051e07995634f02259cc755feda41b41cd94f5e8cde7e5f09369
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 15a1b54dc4e48243b02496cc5819a16718906e87a26438f5684134a31f59376e
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 15a1b54dc4e48243b02496cc5819a16718906e87a26438f5684134a31f59376e
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: a86b1b21d0a7837c40a684b961709dd168e7b2e396f22c8e73abdb428163b140
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: a86b1b21d0a7837c40a684b961709dd168e7b2e396f22c8e73abdb428163b140

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
libxml2-2.9.7-13.el8_6.10.src.rpm SHA-256: 1fc83da5ef89cff82b7c48450ae61791b510039131366bab7c71d56976e75cb3
x86_64
libxml2-2.9.7-13.el8_6.10.i686.rpm SHA-256: 0e8786cad079c6b8a348e49050c43ef07b079b6e7ac69f1704bf1ab9f6c3f581
libxml2-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: fba81ca1eea21210aa2493d6ede3e5f0d0c28096ac5908fe1cdd664f04de23a5
libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 46a39932d9008af5cd37ac3dad05703913e0ca2ec80cc81e23c1e094c03bef28
libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 46a39932d9008af5cd37ac3dad05703913e0ca2ec80cc81e23c1e094c03bef28
libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: aadadfd3823988f3fad4162dc369b23896d48a08036d98acbd823e318f88dbe5
libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: aadadfd3823988f3fad4162dc369b23896d48a08036d98acbd823e318f88dbe5
libxml2-debugsource-2.9.7-13.el8_6.10.i686.rpm SHA-256: 9aefa37d908e7ab0ec234cd6987a8853715cdcc709af13f9cf80d674c8aa0d30
libxml2-debugsource-2.9.7-13.el8_6.10.i686.rpm SHA-256: 9aefa37d908e7ab0ec234cd6987a8853715cdcc709af13f9cf80d674c8aa0d30
libxml2-debugsource-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a4be2aaaf5cb3365454e52a01c9ccd84c8e2b28a2c54ed0f08a796753d99cdd
libxml2-debugsource-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a4be2aaaf5cb3365454e52a01c9ccd84c8e2b28a2c54ed0f08a796753d99cdd
libxml2-devel-2.9.7-13.el8_6.10.i686.rpm SHA-256: 61699c95b023f0900b4dbf9a556338083dc59dda8ec82e5a56153a03d6ff1e5c
libxml2-devel-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a284aa978486942cf4940c14039e4210c95388ff7233113052588b46b92e5e1
python3-libxml2-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 4133c3d5a4ec051e07995634f02259cc755feda41b41cd94f5e8cde7e5f09369
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 15a1b54dc4e48243b02496cc5819a16718906e87a26438f5684134a31f59376e
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 15a1b54dc4e48243b02496cc5819a16718906e87a26438f5684134a31f59376e
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: a86b1b21d0a7837c40a684b961709dd168e7b2e396f22c8e73abdb428163b140
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: a86b1b21d0a7837c40a684b961709dd168e7b2e396f22c8e73abdb428163b140

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
libxml2-2.9.7-13.el8_6.10.src.rpm SHA-256: 1fc83da5ef89cff82b7c48450ae61791b510039131366bab7c71d56976e75cb3
ppc64le
libxml2-2.9.7-13.el8_6.10.ppc64le.rpm SHA-256: 670e37c242b21c9ef1d6f2a179bc35c1a787a38726379b2d7727c8b95dea3119
libxml2-debuginfo-2.9.7-13.el8_6.10.ppc64le.rpm SHA-256: a8f0e3a1d03d7665ac5668d60f3564cd9f386f0b262a1cf1665df34af7117e87
libxml2-debuginfo-2.9.7-13.el8_6.10.ppc64le.rpm SHA-256: a8f0e3a1d03d7665ac5668d60f3564cd9f386f0b262a1cf1665df34af7117e87
libxml2-debugsource-2.9.7-13.el8_6.10.ppc64le.rpm SHA-256: 7be41bdb96b5a589fa22dd451cb21e5f048313b5ea3cda4842d3013b9c19a340
libxml2-debugsource-2.9.7-13.el8_6.10.ppc64le.rpm SHA-256: 7be41bdb96b5a589fa22dd451cb21e5f048313b5ea3cda4842d3013b9c19a340
libxml2-devel-2.9.7-13.el8_6.10.ppc64le.rpm SHA-256: c26a61be17383dcca1ffd0a28d1db73abc524cb77c1c8a079c686b17040c9078
python3-libxml2-2.9.7-13.el8_6.10.ppc64le.rpm SHA-256: 118e5ed9e0fb96b5e7f9c33382aec11e37ec57dde4450c38bcba724154498393
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.ppc64le.rpm SHA-256: 69cbc87ace67309129d2935345b9fcff4340272cdc479e157f84ce0b6bbe581f
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.ppc64le.rpm SHA-256: 69cbc87ace67309129d2935345b9fcff4340272cdc479e157f84ce0b6bbe581f

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
libxml2-2.9.7-13.el8_6.10.src.rpm SHA-256: 1fc83da5ef89cff82b7c48450ae61791b510039131366bab7c71d56976e75cb3
x86_64
libxml2-2.9.7-13.el8_6.10.i686.rpm SHA-256: 0e8786cad079c6b8a348e49050c43ef07b079b6e7ac69f1704bf1ab9f6c3f581
libxml2-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: fba81ca1eea21210aa2493d6ede3e5f0d0c28096ac5908fe1cdd664f04de23a5
libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 46a39932d9008af5cd37ac3dad05703913e0ca2ec80cc81e23c1e094c03bef28
libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 46a39932d9008af5cd37ac3dad05703913e0ca2ec80cc81e23c1e094c03bef28
libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: aadadfd3823988f3fad4162dc369b23896d48a08036d98acbd823e318f88dbe5
libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: aadadfd3823988f3fad4162dc369b23896d48a08036d98acbd823e318f88dbe5
libxml2-debugsource-2.9.7-13.el8_6.10.i686.rpm SHA-256: 9aefa37d908e7ab0ec234cd6987a8853715cdcc709af13f9cf80d674c8aa0d30
libxml2-debugsource-2.9.7-13.el8_6.10.i686.rpm SHA-256: 9aefa37d908e7ab0ec234cd6987a8853715cdcc709af13f9cf80d674c8aa0d30
libxml2-debugsource-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a4be2aaaf5cb3365454e52a01c9ccd84c8e2b28a2c54ed0f08a796753d99cdd
libxml2-debugsource-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a4be2aaaf5cb3365454e52a01c9ccd84c8e2b28a2c54ed0f08a796753d99cdd
libxml2-devel-2.9.7-13.el8_6.10.i686.rpm SHA-256: 61699c95b023f0900b4dbf9a556338083dc59dda8ec82e5a56153a03d6ff1e5c
libxml2-devel-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 7a284aa978486942cf4940c14039e4210c95388ff7233113052588b46b92e5e1
python3-libxml2-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: 4133c3d5a4ec051e07995634f02259cc755feda41b41cd94f5e8cde7e5f09369
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 15a1b54dc4e48243b02496cc5819a16718906e87a26438f5684134a31f59376e
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.i686.rpm SHA-256: 15a1b54dc4e48243b02496cc5819a16718906e87a26438f5684134a31f59376e
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: a86b1b21d0a7837c40a684b961709dd168e7b2e396f22c8e73abdb428163b140
python3-libxml2-debuginfo-2.9.7-13.el8_6.10.x86_64.rpm SHA-256: a86b1b21d0a7837c40a684b961709dd168e7b2e396f22c8e73abdb428163b140

Red Hat 제품 보안팀 연락처는 secalert@redhat.com입니다. https://access.redhat.com/security/team/contact/에 더 많은 연락처 정보가 있습니다.