85 matches found
OESA-2026-3884 libxml2 security update
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
CLSA-2026-1789780589 libxml2: Fix of 5 CVEs
CVE-2026-86140: add bounds checks around the parenthesis writes in xmlSnprintfElements - CVE-2026-86141: check the xmlStrdup result in xmlRegNewParserCtxt so a failed allocation cannot leave a NULL parser cursor - CVE-2026-86142: make xmlStrlen saturate above INTMAX and reject the saturated...
CLSA-2026-1789745282 libxml2: Fix of CVE-2026-86140
CVE-2026-86140: add bounds checks around the englobing parenthesis strcat calls in xmlSnprintfElements to prevent stack buffer overflow when dumping long element lists...
CLSA-2026-1789745145 libxml2: Fix of CVE-2026-86140
CVE-2026-86140: add bounds checks around the englobing parenthesis strcat calls in xmlSnprintfElements to prevent stack buffer overflow when dumping long element lists...
EulerOS Virtualization 2.11.0 : libxml2 (EulerOS-SA-2026-3524)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.CVE-2025-27113 libxml2...
CLSA-2026-1789668422 libxml2: Fix of 5 CVEs
CVE-2026-86140: add bounds checks around the parenthesis writes in xmlSnprintfElements - CVE-2026-86141: check the xmlStrdup result in xmlRegNewParserCtxt so a failed allocation cannot leave a NULL parser cursor - CVE-2026-86142: make xmlStrlen saturate above INTMAX and reject the saturated...
CLSA-2026-1789668093 libxml2: Fix of 5 CVEs
CVE-2026-86140: add bounds checks around the parenthesis writes in xmlSnprintfElements - CVE-2026-86141: check the xmlStrdup result in xmlRegNewParserCtxt so a failed allocation cannot leave a NULL parser cursor - CVE-2026-86142: make xmlStrlen saturate above INTMAX and reject the saturated...
CLSA-2026-1789655873 libxml2: Fix of 4 CVEs
CVE-2026-86140: add the missing bounds checks around the two unguarded strcat calls in xmlSnprintfElements, the sibling of the function fixed for CVE-2025-24928 - CVE-2026-86142: reject a saturated xmlStrlen result in xmlXPtrEvalXPtrPart before it is used to size the XPointer buffer -...
CLSA-2026-1789601022 Fix of 5 CVEs
SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements - debian/patches/CVE-2026-86140.patch: add bounds checks around the parenthesis writes in xmlSnprintfElements in valid.c - CVE-2026-86140 SECURITY UPDATE: NULL pointer dereference in xmlRegNewParserCtxt after a failed allocation -...
CLSA-2026-1789380986 libxml2: Fix of 3 CVEs
CVE-2026-86138: add overflow checks to xmlDictAddQString pool size calculation and bound the QName lengths in its caller xmlDictQLookup to prevent heap buffer overflow when interning long QNames - CVE-2026-86140: add bounds checks around the englobing parenthesis strcat calls in...
libxml2: Fix of 3 CVEs
CVE-2026-86138: add overflow checks to xmlDictAddQString pool size calculation and bound the QName lengths in its caller xmlDictQLookup to prevent heap buffer overflow when interning long QNames - CVE-2026-86140: add bounds checks around the englobing parenthesis strcat calls in...
CLSA-2026-1789463267 Fix CVE(s): CVE-2026-86140
SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements - debian/patches/CVE-2026-86140.patch: add the missing remaining-space checks around the strcat calls that wrap the node loop in xmlSnprintfElements in valid.c, matching the guards CVE-2025-24928 already added to...
SUSE CVE-2026-86140
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...
CLSA-2026-1788943516 Fix CVE(s): CVE-2026-86140
SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements - debian/patches/CVE-2026-86140.patch: bounds-check the space left in the output buffer in valid.c before the strcat of the opening and closing parenthesis in xmlSnprintfElements, returning early with an ellipsis when there is not enou...
CVE-2026-86140
A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited. Mitigation T...
libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements
A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...
CVE-2026-86140
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...
AZL-99717 CVE-2026-86140 affecting package libxml2 for versions less than 2.11.5-11
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...
