Release date:
2026-09-15 10:26:13 UTC
Description:
- CVE-2026-86138: fix integer overflow in xmlDictAddQString pool size
calculation that could lead to a heap buffer overflow, and cap the QName
lengths accepted by xmlDictQLookup so the guard cannot be skipped
Updated packages:
-
libxml2-2.9.13-12.el9_6.tuxcare.els8.i686.rpm
sha:52b8b77676358e92920f7026c22e7b9bf328117f145ec865fb964636ea221a8c
-
libxml2-2.9.13-12.el9_6.tuxcare.els8.x86_64.rpm
sha:40b52519b2bd6ee76e3a68d4ea9b4f10ad4eb3eaa234d7cec68f48e160d10c28
-
libxml2-devel-2.9.13-12.el9_6.tuxcare.els8.i686.rpm
sha:1f74917b34b53f766a63ae708f0d7d83f6be8b7702eae21d43d97ca45dff6a57
-
libxml2-devel-2.9.13-12.el9_6.tuxcare.els8.x86_64.rpm
sha:8a86a4f270a01e29b969a744507242bbc33ee67da92cb4fe1b778bf99abbd85b
-
libxml2-static-2.9.13-12.el9_6.tuxcare.els8.x86_64.rpm
sha:3e5d38551f36c0334f31e4e486438b1273b7a346a083b4a31eedfbcc3ed6b2f6
-
python3-libxml2-2.9.13-12.el9_6.tuxcare.els8.x86_64.rpm
sha:d81e44030198c19a730a068cd069b7ecf281a36f8b3bac34f02863e0ad0fe9ec
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
