CLSA-2026-1789601376
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1789601376.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1789601376
- Upstream
- Published
- 2026-09-16T23:29:49Z
- Modified
- 2026-10-26T09:32:04Z
- Summary
- Fix CVE(s): CVE-2026-86142, CVE-2026-86143, CVE-2026-86144
- Details
-
- SECURITY UPDATE: heap buffer overflow in xmlXPtrEvalXPtrPart() on
oversized xpointer() expressions
- debian/patches/CVE-2026-86142.patch: make xmlStrlen() in xmlstring.c saturate above INT_MAX and reject the saturated length in xmlXPtrEvalXPtrPart() in xpointer.c before sizing the buffer
- CVE-2026-86142
- SECURITY UPDATE: integer overflow before the output write callback
- debian/patches/CVE-2026-86143.patch: check for integer overflow before passing a buffer length to the write callback in xmlIO.c
- CVE-2026-86143
- SECURITY UPDATE: parse flags not propagated by xmlXIncludeProcess() and
xmlXIncludeProcessTree()
- debian/patches/CVE-2026-86144.patch: propagate the document parse flags in xmlXIncludeProcess() and xmlXIncludeProcessTree() in xinclude.c
- CVE-2026-86144
- SECURITY UPDATE: heap buffer overflow in xmlXPtrEvalXPtrPart() on
oversized xpointer() expressions
- References