Alerts This Week
Warning Icon 1 1,220
Alerts This Week
Warning Icon 1 1,220

Slackware 15.0 SSA:2025-050-01 moderate: Libxml2 buffer overflow

slackware
Calendar Grey February 19, 2025
Dist Slackware Esm H88
Updated libxml2 distributions are now available for Slackware 15.0 and -current, addressing critical security flaws and potential buffer overflow risks.
New libxml2 packages are available for Slackware 15.0 and -current to fix security issues

Summary

Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.9-i586-2_slack15.0.txz: Rebuilt. This update fixes security issues: Fix stack-buffer-overflow in xmlSnprintfElements. Fix use-after-free after xmlSchemaItemListAdd. pattern: Fix compilation of explicit child axis. For more information, see: https://www.cve.org/CVERecord?id=CVE-2025-24928 https://www.cve.org/CVERecord?id=CVE-2024-56171 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/libxml2-2.11.9-i586-2_slack15.0.txz
Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/libxml2-2.11.9-x86_64-2_slack15.0.txz
Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/libxml2-2.13.6-i686-1.txz
Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/libxml2-2.13.6-x86_64-1.txz

MD5 Signatures

Slackware 15.0 package: f1f3b5b4df04e22ae6449e9fa004157a libxml2-2.11.9-i586-2_slack15.0.txz
Slackware x86_64 15.0 package: 48fe3dfdd5572e51b607989298041b51 libxml2-2.11.9-x86_64-2_slack15.0.txz
Slackware -current package: ad3e493267228d86a78e03e82d8e3be4 l/libxml2-2.13.6-i686-1.txz
Slackware x86_64 -current package: be10dee4e33eeb89e70d188c62194c4b l/libxml2-2.13.6-x86_64-1.txz

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg libxml2-2.11.9-i586-2_slack15.0.txz

Your message here