Release date:
2026-09-17 18:01:48 UTC
Description:
- CVE-2026-86140: add bounds checks around the parenthesis writes in xmlSnprintfElements
- CVE-2026-86141: check the xmlStrdup result in xmlRegNewParserCtxt so a failed allocation cannot leave a NULL parser cursor
- CVE-2026-86142: make xmlStrlen saturate above INT_MAX and reject the saturated
length in xmlXPtrEvalXPtrPart before sizing the buffer
- CVE-2026-86143: check for integer overflow before passing a buffer length to the output write callback
- CVE-2026-86144: propagate the document parse flags in xmlXIncludeProcess and xmlXIncludeProcessTree
Updated packages:
-
libxml2-2.9.7-9.el8_4.2.tuxcare.els18.i686.rpm
sha:a15085c5ae33f3fa6ffaf868efdf19fbc893c54fa51687975d98e09192666597
-
libxml2-2.9.7-9.el8_4.2.tuxcare.els18.x86_64.rpm
sha:53214d74a13f0a793677b0c32ed818a04356af7648b487588fd21c8d6a269760
-
libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els18.i686.rpm
sha:7ffec2598538af77a83fc0db627b309d10921558d431833f7e3c159c5eae7333
-
libxml2-devel-2.9.7-9.el8_4.2.tuxcare.els18.x86_64.rpm
sha:f926ab9106889e59f92fa8adda096be2a41559f840b1f4558b0bb1e89e67d766
-
libxml2-static-2.9.7-9.el8_4.2.tuxcare.els18.x86_64.rpm
sha:2f5f236bb2cc467521fe8ec1f69c3e8326b7d823fcb32f669786499ec1dbd708
-
python3-libxml2-2.9.7-9.el8_4.2.tuxcare.els18.x86_64.rpm
sha:26a9e5d23ed07ac6a28dc712e9d3fa70d54e9594c2f979face40b78559768b7b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
