[CLSA-2026:1790034077] libxml2: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-24 09:20:46 UTC
Description:
- CVE-2026-86143: reject buffer lengths at or above INT_MAX before calling the output write callback to prevent an integer overflow - CVE-2026-86144: propagate parseFlags in xmlXIncludeProcess and xmlXIncludeProcessTree so parser flags such as XML_PARSE_NONET are honoured
Updated packages:
  • libxml2-2.7.6-21.el6_8.1.tuxcare.els17.i686.rpm
    sha:3344c83cdca9e0f5ff493bd7e71fe44d62457f2365e7b2864c16cf44fe7c2b7f
  • libxml2-2.7.6-21.el6_8.1.tuxcare.els17.x86_64.rpm
    sha:1bcefd74217303393ec1c4e103acf118d5e498a8c1de706e8682d7e41110a908
  • libxml2-devel-2.7.6-21.el6_8.1.tuxcare.els17.i686.rpm
    sha:b9b61e0092d3fa228ec2bd739f4d870b13b286d4f593ba24f42fb59d977772cf
  • libxml2-devel-2.7.6-21.el6_8.1.tuxcare.els17.x86_64.rpm
    sha:7f04d2059be3cdfc19801455df63e8da5170ff01564fad168fdabcdd9729fe5b
  • libxml2-python-2.7.6-21.el6_8.1.tuxcare.els17.x86_64.rpm
    sha:34b6a03b1506816af814ef4d9aeb62f6023bba6c868df603022fbb2882607025
  • libxml2-static-2.7.6-21.el6_8.1.tuxcare.els17.x86_64.rpm
    sha:55fb48ae33c9cdfca92a2112ef8a3919e8a54280da65caa37a9e4e2725d66456
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.