[CLSA-2026:1789747948] Fix CVE(s): CVE-2026-86142
Type:
security
Severity:
Critical
Release date:
2026-09-18 16:12:39 UTC
Description:
* SECURITY UPDATE: heap-based buffer overflow in XPointer expression parsing - debian/patches/CVE-2026-86142.patch: reject XPointer parts longer than INT_MAX before allocating xmlXPtrEvalXPtrPart()'s copy buffer, avoiding xmlStrlen() wraparound and the resulting heap overflow - CVE-2026-86142
CVEs fixed:
Updated packages:
  • libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
    sha:c65ad63d37d4024fa052f5e3eb18eb98b56f00c7
  • libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
    sha:4f3ebfcd7941a65931a2bfafefd3c83acefededa
  • libxml2-doc_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_all.deb
    sha:097083a57d34ccc43bcc3d566c7bd741f8dcc96f
  • libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
    sha:4e09ab94e9e67f292198afecc6d52ed54fae4c18
  • python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
    sha:5f1a67fa480b5676c17b538861c3be96b81351d3
  • python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_amd64.deb
    sha:eb7947fee116077d476f9fe81f1abd8faea0687b
  • libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
    sha:34b81b0e68f7ec50fdb4bb1b0d20d704140a4c03
  • libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
    sha:56766c16ac99aeeffb3671c283c1bf32fe60d30b
  • libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
    sha:af730c33a58b4aff3c29ac6004c4a9c968d38f40
  • python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
    sha:d09fa8ca6a4b81282760f50e0a6a4e75ad38e470
  • python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_arm64.deb
    sha:8d0f8cd874c1a19c0059a4b699a4d927dfbe08d2
  • libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_armel.deb
    sha:b5f2db730302d20b1f2815ece280227d26fc1551
  • libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_armel.deb
    sha:620cc6955af265424aea48cb51d9f7d31719e956
  • libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_armel.deb
    sha:f1dd387c32c9ee69192013e0ab29299346c67f0e
  • python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_armel.deb
    sha:4f102dc2c5fe5872c8b01aade97f0a6d328e0b59
  • python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els15_armel.deb
    sha:2c2309a18947e282a1684a13c01712777ba8b005
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.