Release date:
2026-09-15 12:35:31 UTC
Description:
- CVE-2026-86143: reject output buffer lengths that do not fit in an int
before calling writecallback in xmlOutputBufferWrite,
xmlOutputBufferWriteEscape and xmlOutputBufferFlush, so that a negative
length can no longer reach a write callback
- CVE-2026-86144: propagate the document parse flags in xmlXIncludeProcess,
xmlXIncludeProcessTree and xmlXIncludeLoadTxt so that options such as
XML_PARSE_NONET are honoured during XInclude resolution
Updated packages:
-
libxml2-2.9.13-3.el9_2.1.tuxcare.els17.i686.rpm
sha:2eb81cd9e4d3e6c76871d72f90dcf52178e07d45f3a2c5f94fcd162e23b5020a
-
libxml2-2.9.13-3.el9_2.1.tuxcare.els17.x86_64.rpm
sha:ab5c96f76be4c79cc1e72ec323c56ffb96ff4655e660e693026671e27bc53c90
-
libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els17.i686.rpm
sha:a454a882287bf0503e5421de023e21b5a3b6b01e8638b16a57c4c6495354cd51
-
libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els17.x86_64.rpm
sha:e3a967cf18317bdd034002557c59c92b0cb79a49cf537c6d8cf117f8f3974d0d
-
libxml2-static-2.9.13-3.el9_2.1.tuxcare.els17.x86_64.rpm
sha:d95775375cf28313b4f5e992ce23a68da7ddd865094d02c7632c1b1e0c066a49
-
python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els17.x86_64.rpm
sha:944ccc78c46f0ecf393795c79d754c5561394c5b708fe9d13a4e42ca2de29d25
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
