53 matches found
OESA-2026-3887 libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
OESA-2026-3885 libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
OESA-2026-3884 libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
CLSA-2026-1789744484 Fix CVE(s): CVE-2026-86138
SECURITY UPDATE: heap buffer overflow in the XML dictionary QName interning path - debian/patches/CVE-2026-86138.patch: Add integer overflow checks to the pool size calculation in xmlDictAddQString in dict.c, and cap the prefix and name lengths in xmlDictQLookup so the sum namelen + plen + 1 cann...
CLSA-2026-1789567256 Fix CVE(s): CVE-2026-86138, CVE-2026-86140, CVE-2026-86143, CVE-2026-86144
SECURITY UPDATE: integer overflow leading to heap buffer overflow in xmlDictAddQString - debian/patches/CVE-2026-86138.patch: add SIZEMAX-based overflow guards to the pool size computation in xmlDictAddQString in dict.c, plus a SIZEMAX fallback define, so an oversized prefix and name can no longe...
CLSA-2026-1789576008 libxml2: Fix of CVE-2026-86138
CVE-2026-86138: add integer-overflow guards to the pool size calculations in xmlDictAddString and xmlDictAddQString, and cap the name and prefix lengths in xmlDictQLookup at INTMAX/2, preventing an undersized allocation and heap buffer overflow...
CLSA-2026-1789572329 Fix CVE(s): CVE-2026-86138
SECURITY UPDATE: integer overflow leading to heap buffer overflow in xmlDictAddQString - debian/patches/CVE-2026-86138.patch: add SIZEMAX-based overflow guards to the pool size computation in xmlDictAddQString in dict.c, plus a SIZEMAX fallback define, so an oversized prefix and name can no longe...
CLSA-2026-1789380986 libxml2: Fix of 3 CVEs
CVE-2026-86138: add overflow checks to xmlDictAddQString pool size calculation and bound the QName lengths in its caller xmlDictQLookup to prevent heap buffer overflow when interning long QNames - CVE-2026-86140: add bounds checks around the englobing parenthesis strcat calls in...
CLSA-2026-1789470539 libxml2: Fix of CVE-2026-86138
CVE-2026-86138: fix integer overflow in xmlDictAddQString pool size calculation causing heap buffer overflow...
CLSA-2026-1789467963 libxml2: Fix of CVE-2026-86138
CVE-2026-86138: fix integer overflow in xmlDictAddQString pool size calculation that could lead to a heap buffer overflow, and cap the QName lengths accepted by xmlDictQLookup so the guard cannot be skipped...
CLSA-2026-1789463325 libxml2: Fix of CVE-2026-86138
CVE-2026-86138: fix integer overflow in xmlDictAddQString pool size calculation causing heap buffer overflow...
CLSA-2026-1789384426 Fix CVE(s): CVE-2026-86138
SECURITY UPDATE: integer overflow leading to heap buffer overflow in xmlDictAddQString - debian/patches/CVE-2026-86138.patch: add overflow checks for pool size calculations in xmlDictAddQString and its sibling xmlDictAddString, and cap the QName length in xmlDictQLookup, in dict.c - CVE-2026-8613...
CVE-2026-86138
A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...
libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow
A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...
AZL-99711 CVE-2026-86138 affecting package libxml2 for versions less than 2.11.5-11
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
CVE-2026-86138
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
UBUNTU-CVE-2026-86138
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
CVE-2026-86138
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...
