[CLSA-2026:1789470539] libxml2: Fix of CVE-2026-86138
Type:
security
Severity:
Critical
Release date:
2026-09-15 11:09:09 UTC
Description:
- CVE-2026-86138: fix integer overflow in xmlDictAddQString pool size calculation causing heap buffer overflow
CVEs fixed:
Updated packages:
  • libxml2-2.9.7-9.el8_4.2.tuxcare.els17.i686.rpm
    sha:bea043a846e8a17de937bc99de106371d0381f0a9fc8271960b3534fbc16ab32
  • libxml2-2.9.7-9.el8_4.2.tuxcare.els17.x86_64.rpm
    sha:e82096a1822a3bcde5d650d7659d2bac211281f4344f5e81b8bb8951662d5314
  • libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els17.i686.rpm
    sha:f6557d782d7de4184714d0623bd81e56552bdaa943bbb9cc351425f4a223892c
  • libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els17.x86_64.rpm
    sha:1ba96494d6f8c53fb8ce36f89e2bec833f9fa7e2ae07af5c8b9cecf9fe6c8b1f
  • libxml2-static-2.9.7-9.el8_4.2.tuxcare.els17.x86_64.rpm
    sha:11558cf02b5941e8b0e317fdfd96cde0be574b90618cb0c72fcb133ed642e67f
  • python3-libxml2-2.9.7-9.el8_4.2.tuxcare.els17.x86_64.rpm
    sha:a0896bc504382a9d4eb343d7d1a3cc3b21979dd5b2a94f96d5b149dc05570d26
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.