Release date:
2026-09-18 15:30:13 UTC
Description:
* SECURITY UPDATE: heap-based buffer overflow in XPointer expression parsing
- debian/patches/CVE-2026-86142.patch: reject XPointer parts longer than
INT_MAX before allocating xmlXPtrEvalXPtrPart()'s copy buffer, avoiding
xmlStrlen() wraparound and the resulting heap overflow
- CVE-2026-86142
Updated packages:
-
libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
sha:5565b6818139b87c20e2219ac53f3d9f396d1eb4
-
libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
sha:cb797cec7023150e0b8836c5ea98091def0a344d
-
libxml2-doc_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_all.deb
sha:ca7b55c0f8debb2e3454e6bf8489c83ad0c94af6
-
libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
sha:ee7d31fbce5e1b7799688263a41ba9a3fe05ddd4
-
python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
sha:7ffb3fe33e16279ff4ad1a8c58b74441caab511e
-
python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
sha:024cfbcd502c2709728d1ece55d51ceaae8c71b5
-
libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
sha:deb9a5c8818a7f9b4b78c52c5911e57ab2fcc120
-
libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
sha:c812f93f9f3a6754a8b40b20ee8176c5854b1544
-
libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
sha:3c2bd41639160036d7886c098a5d5a971727a6b8
-
python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
sha:dd53ad80e77de84e691db38369556ee5d583f1dd
-
python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
sha:a99afa229d7980914bc00db88f5121bbcd486e42
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
