Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2026-151329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151329 advisory. In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check f...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libxml2 (UTSA-2026-130069)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130069 advisory. In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check f...

CLSA-2026-1789655873 libxml2: Fix of 4 CVEs

CVE-2026-86140: add the missing bounds checks around the two unguarded strcat calls in xmlSnprintfElements, the sibling of the function fixed for CVE-2025-24928 - CVE-2026-86142: reject a saturated xmlStrlen result in xmlXPtrEvalXPtrPart before it is used to size the XPointer buffer -...

AZL-99705 CVE-2026-86143 affecting package libxml2 for versions less than 2.11.5-11

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...

CVE-2026-86143

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...

CVE-2026-86143: Integer Coercion Error

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...

CVE-2026-86143: Integer Coercion Error

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...

PT-2026-86304

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.15.4 Description An inconsistency between xmlOutputWriteCallback and xmlBufUse in the xmlIO component allows negative lengths to reach write callbacks due to a missing integer overflow check before the writecallback...

CVE-2026-86143: Integer Coercion Error

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...