[CLSA-2026:1793786540] libxml2: Fix of CVE-2026-76781
Type:
security
Severity:
None
Release date:
2026-11-04 10:02:28 UTC
Description:
- rebase onto Amazon Linux 2 2.9.1-6.amzn2.5.28, which fixes CVE-2026-76781 (NULL dereference in xmlParseXMLCatalogNode for a nextCatalog without a 'catalog' attribute) - keep the TuxCare parser.c, nanohttp.c, xmlreader.c and xpath.c fixes and the dict.c, xmlstring.c and xmlIO.c additions to the vendor's patches, renumbered to Patch10049-Patch10055 above the vendor's new Patch10048
Updated packages:
  • libxml2-2.9.1-6.amzn2.5.28.tuxcare.els1.aarch64.rpm
    sha:8aba575f08b728714d22224ba7d0db84663295d29c140dcfd618260a187e4dfc
  • libxml2-2.9.1-6.amzn2.5.28.tuxcare.els1.i686.rpm
    sha:43c858e117986c1dc1d8f016d8b6c84ff723357aa3206b293e6b852f6a08fe6d
  • libxml2-2.9.1-6.amzn2.5.28.tuxcare.els1.x86_64.rpm
    sha:5bef23b87d2916c0763f120736a93d022a884d22d3d4da0874ca81614a529944
  • libxml2-devel-2.9.1-6.amzn2.5.28.tuxcare.els1.aarch64.rpm
    sha:b17046bd1af02158ff37393ddaca135a8feb26dd946c9a6065f9bf4a96f1f91c
  • libxml2-devel-2.9.1-6.amzn2.5.28.tuxcare.els1.i686.rpm
    sha:03da536c15e7598922a751191480fa847c0b9a2f7a81954e61db5008dd07a287
  • libxml2-devel-2.9.1-6.amzn2.5.28.tuxcare.els1.x86_64.rpm
    sha:b51cac3c09d66a45a029205c12d00866520a9bae272ec7f0e7c64e663af9a70e
  • libxml2-python-2.9.1-6.amzn2.5.28.tuxcare.els1.aarch64.rpm
    sha:855cd61d0082c3caff2199fa4087904a97ee3082dba9c2f2ef6e1d00ad0d1188
  • libxml2-python-2.9.1-6.amzn2.5.28.tuxcare.els1.i686.rpm
    sha:b6bbec13c60cd4184ef20d92c81183d51ce01114a714e7da09e9efe90d316940
  • libxml2-python-2.9.1-6.amzn2.5.28.tuxcare.els1.x86_64.rpm
    sha:4897f3510c4be1c9d3186787912decfb0dab92d618621e64eca8b099d6085af0
  • libxml2-static-2.9.1-6.amzn2.5.28.tuxcare.els1.aarch64.rpm
    sha:0c67ad2d8ec29433f6878e00a61b2cff72a6909e26fcd6edadb575e8045cffe7
  • libxml2-static-2.9.1-6.amzn2.5.28.tuxcare.els1.i686.rpm
    sha:0cde78be6d138830bb2d23c932acb9c0e6389c59ba3241fee4185907eb113dbc
  • libxml2-static-2.9.1-6.amzn2.5.28.tuxcare.els1.x86_64.rpm
    sha:b54b269edfd2d7c7d79407a30ba98de76dfc1dab8fd7cbe2964a0562dac7cd1a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.