Release date:
2026-09-17 18:07:17 UTC
Description:
- CVE-2026-86140: add bounds checks around the parenthesis writes in xmlSnprintfElements
- CVE-2026-86141: check the xmlStrdup result in xmlRegNewParserCtxt so a failed allocation cannot leave a NULL parser cursor
- CVE-2026-86142: make xmlStrlen saturate above INT_MAX and reject the saturated
length in xmlXPtrEvalXPtrPart before sizing the buffer
- CVE-2026-86143: check for integer overflow before passing a buffer length to the output write callback
- CVE-2026-86144: propagate the document parse flags in xmlXIncludeProcess and xmlXIncludeProcessTree
Updated packages:
-
libxml2-2.9.7-9.el8_4.2.tuxcare.els18.i686.rpm
sha:3d723020cf451d1a7f22a3721a1c7d272cc52ceb55b8496af648579cdeb9d01c
-
libxml2-2.9.7-9.el8_4.2.tuxcare.els18.x86_64.rpm
sha:1beddc806f1b6d5464dc71dde7fd2323207cb912d00c5e2ce7edff3cfec8e109
-
libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els18.i686.rpm
sha:73d6c6e0fae14c954cb61b0f73a75414a37d381102dae859c9b04d6075685fd6
-
libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els18.x86_64.rpm
sha:bc7fb43937ae56454d0b2190a0c53cf86bcbc000bad8dde35643fac4072a4db7
-
libxml2-static-2.9.7-9.el8_4.2.tuxcare.els18.x86_64.rpm
sha:60862105b80730dd52ec2f2cd369c460892dd5d81d87b1e362fe5ac5f73caa30
-
python3-libxml2-2.9.7-9.el8_4.2.tuxcare.els18.x86_64.rpm
sha:c3f6e503d643a075ecd36950601387409ce274d17a21fd8f827c31001049266e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
