Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 41: libxml2 2025-65790c11eb Security Advisory Updates

fedora
Calendar Grey March 17, 2025
Dist Fedora Esm H88
Fedora 41 libxml2 update addresses critical vulnerabilities CVE-2024-56171 and CVE-2025-24928 to enhance system security.
Update to 2.12.10 Fix CVE-2024-56171 and CVE-2025-24928.

Summary

This library allows to manipulate XML files. It includes support

to read, modify and write XML and HTML files. There is DTDs support

this includes parsing and validation even with complex DtDs, either

at parse time or later once the document has been modified. The output

can be a simple SAX stream or and in-memory DOM like representations.

In this case one can use the built-in XPath and XPointer implementation

to select sub nodes or ranges. A flexible Input/Output mechanism is

available, with existing HTTP and FTP modules and combined to an

URI library.

Update Information:

Update to 2.12.10 Fix CVE-2024-56171 and CVE-2025-24928.

Topics%20covered

Topics Covered

security advisory buffer overflow critical software update Fedora libxml2 use-after-free

Change Log

* Thu Mar 13 2025 David King - 2.12.10-1 - Update to 2.12.10

References


[ 1 ] Bug #2346513 - CVE-2024-56171 libxml2: Use-After-Free in libxml2 [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2346513 [ 2 ] Bug #2346526 - CVE-2025-24928 libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2346526

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-65790c11eb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: libxml2
Product: Fedora 41
Version: 2.12.10
Release: 1.fc41
URL:
Summary: Library providing XML and HTML support

Topics%20covered

Topics Covered

security advisory buffer overflow critical software update Fedora libxml2 use-after-free

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here