[CLSA-2026:1789463325] libxml2: Fix of CVE-2026-86138
Type:
security
Severity:
Critical
Release date:
2026-09-15 09:08:56 UTC
Description:
- CVE-2026-86138: fix integer overflow in xmlDictAddQString pool size calculation causing heap buffer overflow
CVEs fixed:
Updated packages:
  • libxml2-2.9.7-9.el8_4.2.tuxcare.els17.i686.rpm
    sha:65afb1457d030c77e39050cd4b7dbed0cf84c6cfbe25c7c110e6fd62d15a8121
  • libxml2-2.9.7-9.el8_4.2.tuxcare.els17.x86_64.rpm
    sha:4acccd60a96399d1ed3328f59ebe08fded5cc667e5f1e626ef84c307a063d38b
  • libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els17.i686.rpm
    sha:cb38e086cc5a2b255485584f9e80173eb801a2fbdd62f48efb5d04a47809e9d7
  • libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els17.x86_64.rpm
    sha:8cc07e2ef67c5809712dd08071aa0b1ed7962eb1a2d4fac8f13409673a843bb6
  • libxml2-static-2.9.7-9.el8_4.2.tuxcare.els17.x86_64.rpm
    sha:0285830f7ad440f69e7bf3cc8d9be772bcbf6880ed9513aea061e9b8d8bb1538
  • python3-libxml2-2.9.7-9.el8_4.2.tuxcare.els17.x86_64.rpm
    sha:6502a53173b83160c8b116262850939dd7ed44be816766d1b6052857529fb824
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.