Release date:
2026-09-15 09:07:57 UTC
Description:
* SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements()
- debian/patches/CVE-2026-86140.patch: add the missing remaining-space
checks around the strcat() calls that wrap the node loop in
xmlSnprintfElements() in valid.c, matching the guards CVE-2025-24928
already added to xmlSnprintfElementContent()
- CVE-2026-86140
Updated packages:
-
libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9_amd64.deb
sha:883cdaedf39584252f34265a5bc41429c7e6692e
-
libxml2-dev_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9_amd64.deb
sha:8b8d183056814abc5374a652eb720b91ca869f21
-
libxml2-doc_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9_all.deb
sha:3b56307be6d5f1f078ce7109ba633d282e7eaa34
-
libxml2-utils_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9_amd64.deb
sha:ea513fb0f8482dbbe679266419dc4da8e44ec96f
-
python-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9_amd64.deb
sha:6127c9db0f9490dc25d669e79b09328c33a19953
-
python3-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els9_amd64.deb
sha:db829ccf9f031d740f68088747ac9f290f474329
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
