[CLSA-2026:1791482381] libxml2: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-09 06:55:52 UTC
Description:
- CVE-2026-86138: prevent integer overflow in dictionary QName string allocation - CVE-2026-86143: prevent integer overflow before invoking output buffer write callbacks
Updated packages:
  • libxml2-2.9.13-14.el9_8.5.tuxcare.els2.aarch64.rpm
    sha:3cd524018af41ab069ec800b25cce059fda51e1889015cdb5789f7692d276f61
  • libxml2-2.9.13-14.el9_8.5.tuxcare.els2.i686.rpm
    sha:2ab1aec3fb8c8997754b9830d50586828e06175b8cb998686f233924c823ca33
  • libxml2-2.9.13-14.el9_8.5.tuxcare.els2.x86_64.rpm
    sha:23d737681e60f79f12c501c16b644c7e1f2cb4f6364216afe7b5ba773787fbdf
  • libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els2.aarch64.rpm
    sha:6e4647355f3208287572c349c947209b5310d3734f1a98c3943aa2fb6a2c39d1
  • libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els2.i686.rpm
    sha:4d3c4197def2dd8ebde9ef158371fd93bf2584dbf58a06f780ed546e071e6cdd
  • libxml2-devel-2.9.13-14.el9_8.5.tuxcare.els2.x86_64.rpm
    sha:497f88c5c889c4ed045190bfded27dfdf9cb815a995c1dbc0d0460fcba5943a4
  • libxml2-static-2.9.13-14.el9_8.5.tuxcare.els2.aarch64.rpm
    sha:30baba2b8c89b6e0d37811998624e767d65d9376de276d9eb10e5ba179b011ff
  • libxml2-static-2.9.13-14.el9_8.5.tuxcare.els2.i686.rpm
    sha:b4b66b3be03ca2b1e34093ae1aa56b05fd381fff2d42e624ac9d68c454856061
  • libxml2-static-2.9.13-14.el9_8.5.tuxcare.els2.x86_64.rpm
    sha:b129473ae2b7709d65b33f1084ba0e3e2e6d5615af426553ab7580a60b9e14b7
  • python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els2.aarch64.rpm
    sha:336e0573927ca6e9b38d98496c68eb16fe63ea6c9314537f3e7bf3377704e6eb
  • python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els2.i686.rpm
    sha:0cc86d05422023c30c8212e455cedfa5cf183297af0741912527f5259d517540
  • python3-libxml2-2.9.13-14.el9_8.5.tuxcare.els2.x86_64.rpm
    sha:3ed9668dc3ae6c38709ff189d6ea011a4e2eb5d2607cbcb7b592ffdb547e9c5d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.