Release date:
2026-09-16 15:25:39 UTC
Description:
* SECURITY UPDATE: integer overflow leading to heap buffer overflow in
xmlDictAddQString()
- debian/patches/CVE-2026-86138.patch: add SIZE_MAX-based overflow guards to
the pool size computation in xmlDictAddQString() in dict.c, plus a
SIZE_MAX fallback define, so an oversized prefix and name can no longer
wrap the allocation size and let the following memcpy() write past the
dictionary string pool
- CVE-2026-86138
Updated packages:
-
libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_amd64.deb
sha:cb229a34866374f017210bbdb6d572c7968c7da1
-
libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_amd64.deb
sha:9bc243315385034a616fe47185f10e215e51c545
-
libxml2-doc_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_all.deb
sha:c02e98efe7a45c4b2bf6a7750ef78758d5bce0cb
-
libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_amd64.deb
sha:7a385af928d2a9c933be32a31d88ad2694d1b373
-
python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_amd64.deb
sha:ae4061d60819fc4a81a7317a5f015635819b19ff
-
python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_amd64.deb
sha:131f4f646028c4366e97fe47c1f4d2b349bb4440
-
libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_arm64.deb
sha:d35001d2e03ebb469991752123b9fc7f5a3eb2c8
-
libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_arm64.deb
sha:f562dff47964d7bc4ca8f34f65c829ad671ea769
-
libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_arm64.deb
sha:8c59c7edc0e301c9e7232b84ec1fbceeea934da9
-
python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_arm64.deb
sha:26e31b5f580c449225c7350752153a91aa37429c
-
python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_arm64.deb
sha:adca26beac2b0508cfbbdb002e678943bcd09eb2
-
libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_armel.deb
sha:e2a845934530588d93034d78c7f1525f0545d044
-
libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_armel.deb
sha:cab0db4959c94b0222a7162a6327e9f1a43a2a7e
-
libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_armel.deb
sha:bac195385232c6e25daba8531f9a6d2e4fac9059
-
python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_armel.deb
sha:32ba07e998f3adc828bbf3fbe7f554b7ea16597a
-
python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els14_armel.deb
sha:975d475bc213ea2855b27a6cf775943feac18ba3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
