[CLSA-2026:1788943516] Fix CVE(s): CVE-2026-86140
Type:
security
Severity:
Critical
Release date:
2026-09-09 08:45:27 UTC
Description:
* SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements - debian/patches/CVE-2026-86140.patch: bounds-check the space left in the output buffer in valid.c before the strcat() of the opening and closing parenthesis in xmlSnprintfElements(), returning early with an ellipsis when there is not enough room, matching the guards CVE-2025-24928 added to the sibling xmlSnprintfElementContent() - CVE-2026-86140
CVEs fixed:
Updated packages:
  • libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_amd64.deb
    sha:fff00f5945b61de3cb9b61d8191fc44edfb7e0f7
  • libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_amd64.deb
    sha:4e2378596fa7bb0c8c720f7c1739c78129863470
  • libxml2-doc_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_all.deb
    sha:2e9d3f619a6a14d3a5ed8397f1d3a85067460291
  • libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_amd64.deb
    sha:3cd40ec08900f58a6850b33d71786f63d5116934
  • python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_amd64.deb
    sha:7553a0ed83d8149a69b9de4f56b3c1c3c5e8440c
  • python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_amd64.deb
    sha:8c37aa0aaaf1cdcdb5e5b72c3a310d4761a5551b
  • libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_arm64.deb
    sha:38b8c02fad2063b454c279ecbb90cc878a22e7d0
  • libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_arm64.deb
    sha:ffc522c86b0d0ac21a31317bd7acd14d019e8579
  • libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_arm64.deb
    sha:02887073bcbcb653e14df429a21968933cbd2142
  • python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_arm64.deb
    sha:e741830e8f3a559a6d5de9987ffffcab624256d7
  • python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_arm64.deb
    sha:590c8df682b182b376be33bc4b5c00dfb5a7e7e1
  • libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_armel.deb
    sha:3abb1e01e9acd33a181d54adc71cd0f8e8b29b6f
  • libxml2-dev_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_armel.deb
    sha:1322c6b86f584a7007a1ca6d162df247cfad903c
  • libxml2-utils_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_armel.deb
    sha:1ce8ef128491465e3d3ad4cf3e88737f3a652274
  • python-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_armel.deb
    sha:8e30d26b4c3efe02f5f907f16c841080b2dcc53a
  • python3-libxml2_2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8_armel.deb
    sha:3d80bc0c6a1de6c020aedfd94ffd0bc3b3c6ac6e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.