[CLSA-2026:1789658109] libxml2: Fix of CVE-2026-86138
Type:
security
Severity:
Critical
Release date:
2026-09-18 22:58:16 UTC
Description:
- CVE-2026-86138: add overflow checks to xmlDictAddQString pool size calculation and reject over-long QNames in xmlDictQLookup to prevent heap buffer overflow when interning long QNames
CVEs fixed:
Updated packages:
  • libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els11.i686.rpm
    sha:29b22ca0e90c9c0056fe196d96d52862374a078e17cc09a17cb48fc35a5f57e8
  • libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els11.x86_64.rpm
    sha:0b08cd739cdd456e41cf9d513867a95fb2c5ea4f1bede2d9d6ac565ac729c6a1
  • libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els11.i686.rpm
    sha:54e31c2e38443af13bb28bca40489439fb1c84c705f7919242f27460ddcc9bdd
  • libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els11.x86_64.rpm
    sha:dcdf75ca362fba7f7613b619723809d8860d4798572320664258f45874c3c511
  • libxml2-python-2.9.1-6.0.11.el7_9.6.tuxcare.els11.x86_64.rpm
    sha:1ba73c1653bd22e0e85cb49f93cf5e63c831657b3ca0ec35ecf609b9455e5101
  • libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els11.i686.rpm
    sha:44fba3b2fe908642c67eef7ee89077ec636e419ccdafab19114a7d01c4e56217
  • libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els11.x86_64.rpm
    sha:fb098d21feca26806c297736a94eaa1fa87391dd238720798b5f5f8f452f9678
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.