[CLSA-2026:1789601376] Fix CVE(s): CVE-2026-86142, CVE-2026-86143, CVE-2026-86144

Type:

security

Severity:

Critical

Release date:

2026-09-16 23:29:49 UTC

Description:

   * SECURITY UPDATE: heap buffer overflow in xmlXPtrEvalXPtrPart() on
     oversized xpointer() expressions
     - debian/patches/CVE-2026-86142.patch: make xmlStrlen() in xmlstring.c
       saturate above INT_MAX and reject the saturated length in
       xmlXPtrEvalXPtrPart() in xpointer.c before sizing the buffer
     - CVE-2026-86142
   * SECURITY UPDATE: integer overflow before the output write callback
     - debian/patches/CVE-2026-86143.patch: check for integer overflow before
       passing a buffer length to the write callback in xmlIO.c
     - CVE-2026-86143
   * SECURITY UPDATE: parse flags not propagated by xmlXIncludeProcess() and
     xmlXIncludeProcessTree()
     - debian/patches/CVE-2026-86144.patch: propagate the document parse
       flags in xmlXIncludeProcess() and xmlXIncludeProcessTree() in
       xinclude.c
     - CVE-2026-86144

CVEs fixed:

Updated packages:

libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els10_amd64.deb
sha:88ae0bacf18da181a10e76a22872240d3be23bc0
libxml2-dev_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els10_amd64.deb
sha:b528af10a5329e980922d4287ee2a9ca1d181e2a
libxml2-doc_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els10_all.deb
sha:b8ac9d04eb84eb15c5b3035249ea0ccbe1d8d1c0
libxml2-utils_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els10_amd64.deb
sha:25d9682ef4c4ee9f3aec26908d6d9642ba201672
python-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els10_amd64.deb
sha:0ac7f71202835796eb72f06ed52205bdaa67908f
python3-libxml2_2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els10_amd64.deb
sha:7e23713f438b46f9b195eeb48d99178d000c6421

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.