[CLSA-2026:1793199792] libxml2: Fix of CVE-2026-74860
Type:
security
Severity:
Important
Release date:
2026-10-28 18:27:37 UTC
Description:
- CVE-2026-74860: drop the extra Py_DECREF(newName) after PyList_SetItem() in pythonAttributeDecl(), which steals the reference and left the list holding a freed string
CVEs fixed:
Updated packages:
  • libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els3.i686.rpm
    sha:e9817992edd66e2c836213fe63f1c16ac737820e39aa2cf6faf2973ec1b4ed6f
  • libxml2-2.9.1-6.0.13.el7_9.6.tuxcare.els3.x86_64.rpm
    sha:fbffa0fd3e3f6157bc2c97b24003e66c596ac3241ae5e6948bdf6dfa05e990d8
  • libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els3.i686.rpm
    sha:5183b12e5018b511aa6a906880d5325b8323104cfd0b2cce4497bad9d266f32f
  • libxml2-devel-2.9.1-6.0.13.el7_9.6.tuxcare.els3.x86_64.rpm
    sha:0d4c14abccd53dcc95d1be953d5e2604c1ee691fa42d03070cc368747c04eaef
  • libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els3.i686.rpm
    sha:531865a052a765cd87376349456e4410500e9a73218b470b71232d5bbbfe2e61
  • libxml2-python-2.9.1-6.0.13.el7_9.6.tuxcare.els3.x86_64.rpm
    sha:5c732bc217d2cba1429a1216248ed661ccf11ea935d16009014e9c62fbfeea25
  • libxml2-static-2.9.1-6.0.13.el7_9.6.tuxcare.els3.i686.rpm
    sha:44ed0e47acd1c558e192741021a5a515abb9ba34111e4288dea1b80d145dc252
  • libxml2-static-2.9.1-6.0.13.el7_9.6.tuxcare.els3.x86_64.rpm
    sha:4bfe1a09551a2c9a415f1fa3259f34e72dbacaed5907ee08db04bff3bc99f847
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.