[CLSA-2026:1789657900] libxml2: Fix of CVE-2026-86138
Type:
security
Severity:
Critical
Release date:
2026-09-18 12:10:28 UTC
Description:
- CVE-2026-86138: add overflow checks to xmlDictAddQString pool size calculation and reject over-long QNames in xmlDictQLookup to prevent heap buffer overflow when interning long QNames
CVEs fixed:
Updated packages:
  • libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els11.i686.rpm
    sha:d6508e1eba5a3e174143cf23a6422df21f7973d0f10adc6cbdce83eb541926e3
  • libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els11.x86_64.rpm
    sha:d31944cf648b2900191b4aa9cca133c4935bea90d8f975820a7aa365e9821d9c
  • libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els11.i686.rpm
    sha:4150ed2acfa15ce9a9d87975b496238f500ecdea5434d3c2b03148cd7a31901d
  • libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els11.x86_64.rpm
    sha:2cd1d20e3fbe952f931d0139760ac7190612da30cc5c683b392298ad6015a529
  • libxml2-python-2.9.1-6.0.11.el7_9.6.tuxcare.els11.x86_64.rpm
    sha:be8d5483610529fcd076482afccf39d25389d98814ad68fb0282b5745d0b390f
  • libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els11.i686.rpm
    sha:f86ef4e9ae6dde5aa87b45fb7320d021d6d3c6298e62232224783227755bc9ad
  • libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els11.x86_64.rpm
    sha:0752f78e8414dc6038882444bf47ccef90db0c5aee63c4f71b3e58d69c0efbe1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.