Red Hat Product Errata RHSA-2026:70596 - Security Advisory
Issued:
2026-09-23
Updated:
2026-09-23

RHSA-2026:70596 - Security Advisory

Synopsis

Low: libxml2 security update

Type/Severity

Security Advisory: Low

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libxml2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

  • libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling (CVE-2025-6170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2372952 - CVE-2025-6170 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
libxml2-2.12.5-9.el10_0.2.src.rpm SHA-256: c58416be38318203be75f9abca7d38a8e244b10fc60ad31214e51caa69517a83
x86_64
libxml2-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 17b2b11fac6d9e276755aafed8e2a5075b395950bf5af61d88b8973c5a1a1b7d
libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 59b3548810d5fe3061392b5a38e881cda1673189decf48986610564cb223e4b6
libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 59b3548810d5fe3061392b5a38e881cda1673189decf48986610564cb223e4b6
libxml2-debugsource-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 43b5b6d6af6a1c23708bca95906aedbc57ebcc1339f731bf176677643f96efa5
libxml2-debugsource-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 43b5b6d6af6a1c23708bca95906aedbc57ebcc1339f731bf176677643f96efa5
libxml2-devel-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 796622afb02e48fc20b731e77dbc0b91f830597b642bada7a1aab56bdfbce9a7
python3-libxml2-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 31a66a527cf566fa21ba312a862f47373e42f3c6290017c0bcb9645275aaaf0f
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 7869ce07fc017df1368eb12d82685c51f9ee356d2db4a614391a28c448f6a9c9
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 7869ce07fc017df1368eb12d82685c51f9ee356d2db4a614391a28c448f6a9c9

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
libxml2-2.12.5-9.el10_0.2.src.rpm SHA-256: c58416be38318203be75f9abca7d38a8e244b10fc60ad31214e51caa69517a83
s390x
libxml2-2.12.5-9.el10_0.2.s390x.rpm SHA-256: e298e347d01d38997bc09178c5a0392b8c9fdf0290c69f2a12d9ae7c4ab0b258
libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 4257ba1d58b656eb855114fa84ab028a683bd192cb966ff24cd2cd1839ba3897
libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 4257ba1d58b656eb855114fa84ab028a683bd192cb966ff24cd2cd1839ba3897
libxml2-debugsource-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 76e1a951341e35c33fbbd08dd3a101722077b4b297070fdafe1256062664a421
libxml2-debugsource-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 76e1a951341e35c33fbbd08dd3a101722077b4b297070fdafe1256062664a421
libxml2-devel-2.12.5-9.el10_0.2.s390x.rpm SHA-256: c1adeae99b36d01066306d0788fa7ec6c9ae667e9e7b9a75681082715f28ce2f
python3-libxml2-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 612942377746a54066f9650497cd7f7b5feb92b93ec71e2d9d53fb73d851a9b2
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 860d0e148002061d4bea238131a0c7be998e97f6fb702bf5e32fcbb26466fd2e
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 860d0e148002061d4bea238131a0c7be998e97f6fb702bf5e32fcbb26466fd2e

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
libxml2-2.12.5-9.el10_0.2.src.rpm SHA-256: c58416be38318203be75f9abca7d38a8e244b10fc60ad31214e51caa69517a83
ppc64le
libxml2-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: e380a93a6ef7b8446b85bf09e8ce30d2783201490d449947f643c7f4982f0ce1
libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: c85afe31c878ff1665c3e2595c66157c499b39bb2139d329e08efea5096d0529
libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: c85afe31c878ff1665c3e2595c66157c499b39bb2139d329e08efea5096d0529
libxml2-debugsource-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: f3764f0f6d2f05bc1ab5aef40655268c5c5183226f525f85aab74c5369f29e4b
libxml2-debugsource-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: f3764f0f6d2f05bc1ab5aef40655268c5c5183226f525f85aab74c5369f29e4b
libxml2-devel-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: 0112cf2b6805c4dc3a318f65ecf152cc9e234ada4939679d630bbc978ee031dc
python3-libxml2-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: c43bd67e2d35caf6fff286d1561a7e796e8a03e5b0cba5f42efe548a820b7588
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: 90133d0914110ec1e1dc90d950ad317afdc9e2794d8a9d2d2c387453091cb453
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: 90133d0914110ec1e1dc90d950ad317afdc9e2794d8a9d2d2c387453091cb453

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
libxml2-2.12.5-9.el10_0.2.src.rpm SHA-256: c58416be38318203be75f9abca7d38a8e244b10fc60ad31214e51caa69517a83
aarch64
libxml2-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 67a1a0d1d3f7b704bcb2165eea66a151c7f3e67b20bb6d40cec0352fd774844c
libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: f63e6ce9bbcce309e527ac51088fb647533fd4f88e41ae8f1e0f300d410f8234
libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: f63e6ce9bbcce309e527ac51088fb647533fd4f88e41ae8f1e0f300d410f8234
libxml2-debugsource-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 3c854b34e1abe9a3f01379aadd3d410a9e5bc6041f16900375d35ea1eba16a37
libxml2-debugsource-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 3c854b34e1abe9a3f01379aadd3d410a9e5bc6041f16900375d35ea1eba16a37
libxml2-devel-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 2a358f96a252c900cdb5b02a7db511c62b15914f802119680ec5d4ea76154282
python3-libxml2-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: da0026ba33089151a5299752f390ccf4e4efdb488db4535457a39d38bb8fe32a
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 9a8ff415592029648c083636aa4b63c26d91da931dc2aa4b8fedd6e8351c4543
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 9a8ff415592029648c083636aa4b63c26d91da931dc2aa4b8fedd6e8351c4543

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 59b3548810d5fe3061392b5a38e881cda1673189decf48986610564cb223e4b6
libxml2-debugsource-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 43b5b6d6af6a1c23708bca95906aedbc57ebcc1339f731bf176677643f96efa5
libxml2-static-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 8ec5a8ec562bc9c59668ffc50e9c756bbd8674d55d9bea3d8a1fcb1dc96cb784
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 7869ce07fc017df1368eb12d82685c51f9ee356d2db4a614391a28c448f6a9c9

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: c85afe31c878ff1665c3e2595c66157c499b39bb2139d329e08efea5096d0529
libxml2-debugsource-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: f3764f0f6d2f05bc1ab5aef40655268c5c5183226f525f85aab74c5369f29e4b
libxml2-static-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: 57e01883ad08b2740f4a506861460cc20d1e5dc2c1232f657988ecf3386cf843
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: 90133d0914110ec1e1dc90d950ad317afdc9e2794d8a9d2d2c387453091cb453

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 4257ba1d58b656eb855114fa84ab028a683bd192cb966ff24cd2cd1839ba3897
libxml2-debugsource-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 76e1a951341e35c33fbbd08dd3a101722077b4b297070fdafe1256062664a421
libxml2-static-2.12.5-9.el10_0.2.s390x.rpm SHA-256: ef250ffa027355a110887f0b8833758eda315b7ab2ce9bca030e86503c380fca
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 860d0e148002061d4bea238131a0c7be998e97f6fb702bf5e32fcbb26466fd2e

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: f63e6ce9bbcce309e527ac51088fb647533fd4f88e41ae8f1e0f300d410f8234
libxml2-debugsource-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 3c854b34e1abe9a3f01379aadd3d410a9e5bc6041f16900375d35ea1eba16a37
libxml2-static-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 843124cd4b8c9ba92d002fc07db3277e77ed39eb788576926afc06389858c656
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 9a8ff415592029648c083636aa4b63c26d91da931dc2aa4b8fedd6e8351c4543

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
libxml2-2.12.5-9.el10_0.2.src.rpm SHA-256: c58416be38318203be75f9abca7d38a8e244b10fc60ad31214e51caa69517a83
aarch64
libxml2-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 67a1a0d1d3f7b704bcb2165eea66a151c7f3e67b20bb6d40cec0352fd774844c
libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: f63e6ce9bbcce309e527ac51088fb647533fd4f88e41ae8f1e0f300d410f8234
libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: f63e6ce9bbcce309e527ac51088fb647533fd4f88e41ae8f1e0f300d410f8234
libxml2-debugsource-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 3c854b34e1abe9a3f01379aadd3d410a9e5bc6041f16900375d35ea1eba16a37
libxml2-debugsource-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 3c854b34e1abe9a3f01379aadd3d410a9e5bc6041f16900375d35ea1eba16a37
libxml2-devel-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 2a358f96a252c900cdb5b02a7db511c62b15914f802119680ec5d4ea76154282
python3-libxml2-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: da0026ba33089151a5299752f390ccf4e4efdb488db4535457a39d38bb8fe32a
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 9a8ff415592029648c083636aa4b63c26d91da931dc2aa4b8fedd6e8351c4543
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.aarch64.rpm SHA-256: 9a8ff415592029648c083636aa4b63c26d91da931dc2aa4b8fedd6e8351c4543

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
libxml2-2.12.5-9.el10_0.2.src.rpm SHA-256: c58416be38318203be75f9abca7d38a8e244b10fc60ad31214e51caa69517a83
s390x
libxml2-2.12.5-9.el10_0.2.s390x.rpm SHA-256: e298e347d01d38997bc09178c5a0392b8c9fdf0290c69f2a12d9ae7c4ab0b258
libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 4257ba1d58b656eb855114fa84ab028a683bd192cb966ff24cd2cd1839ba3897
libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 4257ba1d58b656eb855114fa84ab028a683bd192cb966ff24cd2cd1839ba3897
libxml2-debugsource-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 76e1a951341e35c33fbbd08dd3a101722077b4b297070fdafe1256062664a421
libxml2-debugsource-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 76e1a951341e35c33fbbd08dd3a101722077b4b297070fdafe1256062664a421
libxml2-devel-2.12.5-9.el10_0.2.s390x.rpm SHA-256: c1adeae99b36d01066306d0788fa7ec6c9ae667e9e7b9a75681082715f28ce2f
python3-libxml2-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 612942377746a54066f9650497cd7f7b5feb92b93ec71e2d9d53fb73d851a9b2
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 860d0e148002061d4bea238131a0c7be998e97f6fb702bf5e32fcbb26466fd2e
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.s390x.rpm SHA-256: 860d0e148002061d4bea238131a0c7be998e97f6fb702bf5e32fcbb26466fd2e

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
libxml2-2.12.5-9.el10_0.2.src.rpm SHA-256: c58416be38318203be75f9abca7d38a8e244b10fc60ad31214e51caa69517a83
ppc64le
libxml2-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: e380a93a6ef7b8446b85bf09e8ce30d2783201490d449947f643c7f4982f0ce1
libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: c85afe31c878ff1665c3e2595c66157c499b39bb2139d329e08efea5096d0529
libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: c85afe31c878ff1665c3e2595c66157c499b39bb2139d329e08efea5096d0529
libxml2-debugsource-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: f3764f0f6d2f05bc1ab5aef40655268c5c5183226f525f85aab74c5369f29e4b
libxml2-debugsource-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: f3764f0f6d2f05bc1ab5aef40655268c5c5183226f525f85aab74c5369f29e4b
libxml2-devel-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: 0112cf2b6805c4dc3a318f65ecf152cc9e234ada4939679d630bbc978ee031dc
python3-libxml2-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: c43bd67e2d35caf6fff286d1561a7e796e8a03e5b0cba5f42efe548a820b7588
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: 90133d0914110ec1e1dc90d950ad317afdc9e2794d8a9d2d2c387453091cb453
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.ppc64le.rpm SHA-256: 90133d0914110ec1e1dc90d950ad317afdc9e2794d8a9d2d2c387453091cb453

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
libxml2-2.12.5-9.el10_0.2.src.rpm SHA-256: c58416be38318203be75f9abca7d38a8e244b10fc60ad31214e51caa69517a83
x86_64
libxml2-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 17b2b11fac6d9e276755aafed8e2a5075b395950bf5af61d88b8973c5a1a1b7d
libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 59b3548810d5fe3061392b5a38e881cda1673189decf48986610564cb223e4b6
libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 59b3548810d5fe3061392b5a38e881cda1673189decf48986610564cb223e4b6
libxml2-debugsource-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 43b5b6d6af6a1c23708bca95906aedbc57ebcc1339f731bf176677643f96efa5
libxml2-debugsource-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 43b5b6d6af6a1c23708bca95906aedbc57ebcc1339f731bf176677643f96efa5
libxml2-devel-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 796622afb02e48fc20b731e77dbc0b91f830597b642bada7a1aab56bdfbce9a7
python3-libxml2-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 31a66a527cf566fa21ba312a862f47373e42f3c6290017c0bcb9645275aaaf0f
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 7869ce07fc017df1368eb12d82685c51f9ee356d2db4a614391a28c448f6a9c9
python3-libxml2-debuginfo-2.12.5-9.el10_0.2.x86_64.rpm SHA-256: 7869ce07fc017df1368eb12d82685c51f9ee356d2db4a614391a28c448f6a9c9

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.