CLSA-2026-1788943516

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1788943516
Upstream
CVE (2)
Published
2026-09-09T08:45:27Z
Modified
2026-10-26T09:43:43Z
Summary
Fix CVE(s): CVE-2026-86140
Details
  • SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements
    • debian/patches/CVE-2026-86140.patch: bounds-check the space left in the output buffer in valid.c before the strcat() of the opening and closing parenthesis in xmlSnprintfElements(), returning early with an ellipsis when there is not enough room, matching the guards CVE-2025-24928 added to the sibling xmlSnprintfElementContent()
    • CVE-2026-86140
References

Affected packages

TuxCare:Debian:10
libxml2

Package

Name
libxml2
Purl
pkg:deb/tuxcare/libxml2?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
libxml2-dev

Package

Name
libxml2-dev
Purl
pkg:deb/tuxcare/libxml2-dev?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
libxml2-doc

Package

Name
libxml2-doc
Purl
pkg:deb/tuxcare/libxml2-doc?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
libxml2-utils

Package

Name
libxml2-utils
Purl
pkg:deb/tuxcare/libxml2-utils?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
python-libxml2

Package

Name
python-libxml2
Purl
pkg:deb/tuxcare/python-libxml2?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
python3-libxml2

Package

Name
python3-libxml2
Purl
pkg:deb/tuxcare/python3-libxml2?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"