UnratedFix available
Fix CVE(s): CVE-2026-86140
Type: advisorySources: OSV
* SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements - debian/patches/CVE-2026-86140.patch: bounds-check the space left in the output buffer in valid.c before the strcat() of the opening and closing parenthesis in xmlSnprintfElements(), returning early with an ellipsis when there is not enough room, matching the guards CVE-2025-24928 added to the sibling xmlSnprintfElementContent() - CVE-2026-86140
- Products
- libxml2, libxml2-dev, libxml2-doc, libxml2-utils, python-libxml2, python3-libxml2
- Affected versions
- Not specified
- Fixed versions
- 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
- CVEs
- CVE-2025-24928, CVE-2026-86140
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:54 UTC · Revision 1
Source evidence
* SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements - debian/patches/CVE-2026-86140.patch: bounds-check the space left in the output buffer in valid.c before the strcat() of the opening and closing parenthesis in xmlSnprintfElements(), returning early with an ellipsis when there is not enough room, matching the guards CVE-2025-24928 added to the sibling xmlSnprintfElementContent() - CVE-2026-86140
osv:CLSA-2026-1788943516
libxml2
Fixed versions: 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
libxml2-dev
Fixed versions: 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
libxml2-doc
Fixed versions: 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
libxml2-utils
Fixed versions: 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
python-libxml2
Fixed versions: 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
python3-libxml2
Fixed versions: 2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8
Complete source record
{
"id": "8a08430e47e1fc539e54724bc461e3283298d5fca19f70723ec6df391b38e321",
"url": "https://osv.dev/vulnerability/CLSA-2026-1788943516",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Fix CVE(s): CVE-2026-86140",
"summary": "* SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements - debian/patches/CVE-2026-86140.patch: bounds-check the space left in the output buffer in valid.c before the strcat() of the opening and closing parenthesis in xmlSnprintfElements(), returning early with an ellipsis when there is not enough room, matching the guards CVE-2025-24928 added to the sibling xmlSnprintfElementContent() - CVE-2026-86140",
"evidence": "osv:CLSA-2026-1788943516",
"products": [
{
"name": {
"value": "libxml2",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libxml2-dev",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libxml2-doc",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libxml2-utils",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-libxml2",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3-libxml2",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1788943516",
"aliases": [
"CLSA-2026-1788943516"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"
}
]
}
],
"package": {
"name": "libxml2",
"purl": "pkg:deb/tuxcare/libxml2?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"
}
]
}
],
"package": {
"name": "libxml2-dev",
"purl": "pkg:deb/tuxcare/libxml2-dev?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"
}
]
}
],
"package": {
"name": "libxml2-doc",
"purl": "pkg:deb/tuxcare/libxml2-doc?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"
}
]
}
],
"package": {
"name": "libxml2-utils",
"purl": "pkg:deb/tuxcare/libxml2-utils?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"
}
]
}
],
"package": {
"name": "python-libxml2",
"purl": "pkg:deb/tuxcare/python-libxml2?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"
}
]
}
],
"package": {
"name": "python3-libxml2",
"purl": "pkg:deb/tuxcare/python3-libxml2?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"
}
}
],
"modified": "2026-10-26T09:43:43.820029369Z",
"provider": "osv",
"upstream": [
"CVE-2025-24928",
"CVE-2026-86140"
],
"references": [
"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1788943516.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-86140"
]
},
"related_cves": [
{
"value": "CVE-2025-24928",
"evidence": "/upstream"
},
{
"value": "CVE-2026-86140",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 450102,
"published_at": "2026-09-09T08:45:27+00:00"
}