Red Hat Product Errata RHSA-2026:33635 - Security Advisory
Issued:
2026-06-30
Updated:
2026-06-30

RHSA-2026:33635 - Security Advisory

Synopsis

Low: libxml2 security update

Type/Severity

Security Advisory: Low

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libxml2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c (CVE-2024-34459)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2280532 - CVE-2024-34459 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
libxml2-2.12.5-9.el10_0.1.src.rpm SHA-256: f32025ad8af4be58a18260c1de5ba5dbfc7f5c93f2bc77537183961394d6cb54
x86_64
libxml2-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 70811c1f53c7f6813a146b2672a93802d00b874a10f33967822e2629bb99d284
libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 2f9d1ffe50e5b7db28b015559fa3d1c53f0049be09fc5a6a2db1bf3bcdf1fdc6
libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 2f9d1ffe50e5b7db28b015559fa3d1c53f0049be09fc5a6a2db1bf3bcdf1fdc6
libxml2-debugsource-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 4066a66dfc0e27f3cda366b2192a49ac5c6290a25d7345664298e1648ebdf783
libxml2-debugsource-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 4066a66dfc0e27f3cda366b2192a49ac5c6290a25d7345664298e1648ebdf783
libxml2-devel-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: df8cd70f21539e1c1d09c01249687b8a6c4117ebb9a3fc5fe4b4a855166fced7
python3-libxml2-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: c2b52bc74e25f0e1105101494993c9b42d603ebf310e823bb25d122efdd1c497
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 1882ff169e75eaba57f42bac38451d08299027c719449489872a15c6701b54cb
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 1882ff169e75eaba57f42bac38451d08299027c719449489872a15c6701b54cb

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
libxml2-2.12.5-9.el10_0.1.src.rpm SHA-256: f32025ad8af4be58a18260c1de5ba5dbfc7f5c93f2bc77537183961394d6cb54
s390x
libxml2-2.12.5-9.el10_0.1.s390x.rpm SHA-256: 69defd1418679b3846ac1a1626b53ea80ad064e1504ff4397ab81d3a3cebf90b
libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: b9371bcd925a5df571fd82a238fe4df71568fab2224c78378bb72e3343550f58
libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: b9371bcd925a5df571fd82a238fe4df71568fab2224c78378bb72e3343550f58
libxml2-debugsource-2.12.5-9.el10_0.1.s390x.rpm SHA-256: a261fa9f42bbf9e730d213627ac20472743d0e60a1edf5d5b4dc0d4b77db6f9a
libxml2-debugsource-2.12.5-9.el10_0.1.s390x.rpm SHA-256: a261fa9f42bbf9e730d213627ac20472743d0e60a1edf5d5b4dc0d4b77db6f9a
libxml2-devel-2.12.5-9.el10_0.1.s390x.rpm SHA-256: dc01231f5a974d1715c3d51f70ad86460e49ca74a51b6eb1b86a33ad13072497
python3-libxml2-2.12.5-9.el10_0.1.s390x.rpm SHA-256: 82f3e03565e52304588c5eb9c7106a3e01cd8e51650a3f7b0eea993263bd3275
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: 09153a69ff3e7e27d21c3c2fd7f791f08926eb0e997079de1e6adadd2d45046a
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: 09153a69ff3e7e27d21c3c2fd7f791f08926eb0e997079de1e6adadd2d45046a

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
libxml2-2.12.5-9.el10_0.1.src.rpm SHA-256: f32025ad8af4be58a18260c1de5ba5dbfc7f5c93f2bc77537183961394d6cb54
ppc64le
libxml2-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 2a248d42a63531dc2f20a1dd333d898ac207f7a51612fba3643e7e71d5cc726d
libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: c4b64b343b814e56e4434cb47c2a8b69c612e05c04b2d4b1bd7cb71892cbcb17
libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: c4b64b343b814e56e4434cb47c2a8b69c612e05c04b2d4b1bd7cb71892cbcb17
libxml2-debugsource-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 4d5c8888ee94548640763dd6ab0de8894455633d43ab7f049a9a0106512b408c
libxml2-debugsource-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 4d5c8888ee94548640763dd6ab0de8894455633d43ab7f049a9a0106512b408c
libxml2-devel-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 4d12aa115e4d13e7a5f81850a8c5fee32d18a697b014bce072b3499650bedc6d
python3-libxml2-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: ee898b432b7b4d31d9cd4f5d2b13de57c35f4772962f3cde4d1530212c422df2
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 041766e8d607acd1ee0eec2748ef4a03ec788b5d738607485157be6f0caa28f2
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 041766e8d607acd1ee0eec2748ef4a03ec788b5d738607485157be6f0caa28f2

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
libxml2-2.12.5-9.el10_0.1.src.rpm SHA-256: f32025ad8af4be58a18260c1de5ba5dbfc7f5c93f2bc77537183961394d6cb54
aarch64
libxml2-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 96107a41f812b258d2ad9f9d14d1548be9dd9cfaa374f0bb1aba7acdb88a37e2
libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: c6b01b181175a63f3fcdf1fb5f5ad761e71e55e0c8ebe3449bd434db891c21df
libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: c6b01b181175a63f3fcdf1fb5f5ad761e71e55e0c8ebe3449bd434db891c21df
libxml2-debugsource-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 43c61f363fe960ae3c79196724f121e86c482c15dff033fa5137eb91104cca14
libxml2-debugsource-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 43c61f363fe960ae3c79196724f121e86c482c15dff033fa5137eb91104cca14
libxml2-devel-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: e2d117f93717e781200235fab78208fe94c6590960acb52c5c6381bef85a852b
python3-libxml2-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 836e1ea9ec4c0a0d0fd5d08c0e542b2a135ff694f51d32c17b4b7e44317884da
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 7e51215f32123110372c3eded6187a3edaa6f2687df9354475cdb51c9412a95d
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 7e51215f32123110372c3eded6187a3edaa6f2687df9354475cdb51c9412a95d

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 2f9d1ffe50e5b7db28b015559fa3d1c53f0049be09fc5a6a2db1bf3bcdf1fdc6
libxml2-debugsource-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 4066a66dfc0e27f3cda366b2192a49ac5c6290a25d7345664298e1648ebdf783
libxml2-static-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 90e3de32aaaeb517c91f3246d971e34aae0803660b025b9a01d80a7d258cfff6
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 1882ff169e75eaba57f42bac38451d08299027c719449489872a15c6701b54cb

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: c4b64b343b814e56e4434cb47c2a8b69c612e05c04b2d4b1bd7cb71892cbcb17
libxml2-debugsource-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 4d5c8888ee94548640763dd6ab0de8894455633d43ab7f049a9a0106512b408c
libxml2-static-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: ab45dbc640ffdf519c73abd9934a053cdd0527b6e1c5cbdfb28ef969135c6ef2
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 041766e8d607acd1ee0eec2748ef4a03ec788b5d738607485157be6f0caa28f2

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: b9371bcd925a5df571fd82a238fe4df71568fab2224c78378bb72e3343550f58
libxml2-debugsource-2.12.5-9.el10_0.1.s390x.rpm SHA-256: a261fa9f42bbf9e730d213627ac20472743d0e60a1edf5d5b4dc0d4b77db6f9a
libxml2-static-2.12.5-9.el10_0.1.s390x.rpm SHA-256: b975d540f59804c103f427600606f7a6572ee0f25a360c7ee9beebdb09ec6699
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: 09153a69ff3e7e27d21c3c2fd7f791f08926eb0e997079de1e6adadd2d45046a

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: c6b01b181175a63f3fcdf1fb5f5ad761e71e55e0c8ebe3449bd434db891c21df
libxml2-debugsource-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 43c61f363fe960ae3c79196724f121e86c482c15dff033fa5137eb91104cca14
libxml2-static-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 97c77635b6a28e2877f9c38771eea05da966eb2d10b2bbdebd862832804ed414
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 7e51215f32123110372c3eded6187a3edaa6f2687df9354475cdb51c9412a95d

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
libxml2-2.12.5-9.el10_0.1.src.rpm SHA-256: f32025ad8af4be58a18260c1de5ba5dbfc7f5c93f2bc77537183961394d6cb54
aarch64
libxml2-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 96107a41f812b258d2ad9f9d14d1548be9dd9cfaa374f0bb1aba7acdb88a37e2
libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: c6b01b181175a63f3fcdf1fb5f5ad761e71e55e0c8ebe3449bd434db891c21df
libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: c6b01b181175a63f3fcdf1fb5f5ad761e71e55e0c8ebe3449bd434db891c21df
libxml2-debugsource-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 43c61f363fe960ae3c79196724f121e86c482c15dff033fa5137eb91104cca14
libxml2-debugsource-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 43c61f363fe960ae3c79196724f121e86c482c15dff033fa5137eb91104cca14
libxml2-devel-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: e2d117f93717e781200235fab78208fe94c6590960acb52c5c6381bef85a852b
python3-libxml2-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 836e1ea9ec4c0a0d0fd5d08c0e542b2a135ff694f51d32c17b4b7e44317884da
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 7e51215f32123110372c3eded6187a3edaa6f2687df9354475cdb51c9412a95d
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.aarch64.rpm SHA-256: 7e51215f32123110372c3eded6187a3edaa6f2687df9354475cdb51c9412a95d

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
libxml2-2.12.5-9.el10_0.1.src.rpm SHA-256: f32025ad8af4be58a18260c1de5ba5dbfc7f5c93f2bc77537183961394d6cb54
s390x
libxml2-2.12.5-9.el10_0.1.s390x.rpm SHA-256: 69defd1418679b3846ac1a1626b53ea80ad064e1504ff4397ab81d3a3cebf90b
libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: b9371bcd925a5df571fd82a238fe4df71568fab2224c78378bb72e3343550f58
libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: b9371bcd925a5df571fd82a238fe4df71568fab2224c78378bb72e3343550f58
libxml2-debugsource-2.12.5-9.el10_0.1.s390x.rpm SHA-256: a261fa9f42bbf9e730d213627ac20472743d0e60a1edf5d5b4dc0d4b77db6f9a
libxml2-debugsource-2.12.5-9.el10_0.1.s390x.rpm SHA-256: a261fa9f42bbf9e730d213627ac20472743d0e60a1edf5d5b4dc0d4b77db6f9a
libxml2-devel-2.12.5-9.el10_0.1.s390x.rpm SHA-256: dc01231f5a974d1715c3d51f70ad86460e49ca74a51b6eb1b86a33ad13072497
python3-libxml2-2.12.5-9.el10_0.1.s390x.rpm SHA-256: 82f3e03565e52304588c5eb9c7106a3e01cd8e51650a3f7b0eea993263bd3275
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: 09153a69ff3e7e27d21c3c2fd7f791f08926eb0e997079de1e6adadd2d45046a
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.s390x.rpm SHA-256: 09153a69ff3e7e27d21c3c2fd7f791f08926eb0e997079de1e6adadd2d45046a

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
libxml2-2.12.5-9.el10_0.1.src.rpm SHA-256: f32025ad8af4be58a18260c1de5ba5dbfc7f5c93f2bc77537183961394d6cb54
ppc64le
libxml2-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 2a248d42a63531dc2f20a1dd333d898ac207f7a51612fba3643e7e71d5cc726d
libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: c4b64b343b814e56e4434cb47c2a8b69c612e05c04b2d4b1bd7cb71892cbcb17
libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: c4b64b343b814e56e4434cb47c2a8b69c612e05c04b2d4b1bd7cb71892cbcb17
libxml2-debugsource-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 4d5c8888ee94548640763dd6ab0de8894455633d43ab7f049a9a0106512b408c
libxml2-debugsource-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 4d5c8888ee94548640763dd6ab0de8894455633d43ab7f049a9a0106512b408c
libxml2-devel-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 4d12aa115e4d13e7a5f81850a8c5fee32d18a697b014bce072b3499650bedc6d
python3-libxml2-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: ee898b432b7b4d31d9cd4f5d2b13de57c35f4772962f3cde4d1530212c422df2
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 041766e8d607acd1ee0eec2748ef4a03ec788b5d738607485157be6f0caa28f2
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.ppc64le.rpm SHA-256: 041766e8d607acd1ee0eec2748ef4a03ec788b5d738607485157be6f0caa28f2

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
libxml2-2.12.5-9.el10_0.1.src.rpm SHA-256: f32025ad8af4be58a18260c1de5ba5dbfc7f5c93f2bc77537183961394d6cb54
x86_64
libxml2-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 70811c1f53c7f6813a146b2672a93802d00b874a10f33967822e2629bb99d284
libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 2f9d1ffe50e5b7db28b015559fa3d1c53f0049be09fc5a6a2db1bf3bcdf1fdc6
libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 2f9d1ffe50e5b7db28b015559fa3d1c53f0049be09fc5a6a2db1bf3bcdf1fdc6
libxml2-debugsource-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 4066a66dfc0e27f3cda366b2192a49ac5c6290a25d7345664298e1648ebdf783
libxml2-debugsource-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 4066a66dfc0e27f3cda366b2192a49ac5c6290a25d7345664298e1648ebdf783
libxml2-devel-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: df8cd70f21539e1c1d09c01249687b8a6c4117ebb9a3fc5fe4b4a855166fced7
python3-libxml2-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: c2b52bc74e25f0e1105101494993c9b42d603ebf310e823bb25d122efdd1c497
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 1882ff169e75eaba57f42bac38451d08299027c719449489872a15c6701b54cb
python3-libxml2-debuginfo-2.12.5-9.el10_0.1.x86_64.rpm SHA-256: 1882ff169e75eaba57f42bac38451d08299027c719449489872a15c6701b54cb

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.