{"id":"CLSA-2026-1788943516","summary":"Fix CVE(s): CVE-2026-86140","details":"   * SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements\n     - debian/patches/CVE-2026-86140.patch: bounds-check the space left in the\n       output buffer in valid.c before the strcat() of the opening and closing\n       parenthesis in xmlSnprintfElements(), returning early with an ellipsis\n       when there is not enough room, matching the guards CVE-2025-24928 added\n       to the sibling xmlSnprintfElementContent()\n     - CVE-2026-86140","modified":"2026-10-26T09:43:43.820029369Z","published":"2026-09-09T08:45:27Z","upstream":["CVE-2025-24928","CVE-2026-86140"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1788943516.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86140"}],"affected":[{"package":{"name":"libxml2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libxml2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"}},{"package":{"name":"libxml2-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libxml2-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"}},{"package":{"name":"libxml2-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libxml2-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"}},{"package":{"name":"libxml2-utils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libxml2-utils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"}},{"package":{"name":"python-libxml2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python-libxml2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"}},{"package":{"name":"python3-libxml2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/python3-libxml2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788943516.json"}}],"schema_version":"1.9.0"}