Release date:
2026-09-14 11:14:01 UTC
Description:
* SECURITY UPDATE: integer overflow leading to heap buffer overflow in
xmlDictAddQString
- debian/patches/CVE-2026-86138.patch: add overflow checks for pool size
calculations in xmlDictAddQString() and its sibling xmlDictAddString(),
and cap the QName length in xmlDictQLookup(), in dict.c
- CVE-2026-86138
Updated packages:
-
libxml2_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els15_amd64.deb
sha:2bdf8206fa23cea9a15c30cb6bd63ee500d8d128
-
libxml2-dev_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els15_amd64.deb
sha:ca301dfcb3ce3a7d988d7d6311e098f6bb1cdd6e
-
libxml2-doc_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els15_all.deb
sha:729c43af39732cca66a4227835c2c93bb8ef8bff
-
libxml2-utils_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els15_amd64.deb
sha:66f4634d5121269ec707197f7d084f2137cc7c91
-
python-libxml2_2.9.3+dfsg1-1ubuntu0.7+tuxcare.els15_amd64.deb
sha:5498f3e6772cee432cba3a7e4bbe64fb7ea980d2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
