libxml2-2.9.7-21.el8_10.10

エラータID: AXSA:2026-2024:12

Release date: 
Tuesday, October 13, 2026 - 18:05
Subject: 
libxml2-2.9.7-21.el8_10.10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation (CVE-2026-86142)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-86142
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libxml2-2.9.7-21.el8_10.10.src.rpm
    MD5: 54e761bd9026b66bead5f2fae95ca98c
    SHA-256: 3cd42c99746bb71c58cc470dbac7298077812dc6f620840f93f59cefb1841bd6
    Size: 5.26 MB

Asianux Server 8 for x86_64
  1. libxml2-2.9.7-21.el8_10.10.i686.rpm
    MD5: 976ddb27c5c9ceb0f48517b6a0f46fd5
    SHA-256: 76b6d2b3b68f657fcfd53c2deecb68eccab9f2438d060f76288bc2eadb8a1f40
    Size: 743.34 kB
  2. libxml2-2.9.7-21.el8_10.10.x86_64.rpm
    MD5: c34c1ef34028da49ec7075ef5513a4bd
    SHA-256: 336575609613837095f00d144b0018633f123e8ac9a196f5898eaf660b7a2580
    Size: 698.43 kB
  3. libxml2-devel-2.9.7-21.el8_10.10.i686.rpm
    MD5: 71febe6992a48cb48b62223a2fb3495c
    SHA-256: eb1bf6cd7ca3abcebd73d6cf82c565f44b3c1f768101fade0971cd6438bded05
    Size: 1.04 MB
  4. libxml2-devel-2.9.7-21.el8_10.10.x86_64.rpm
    MD5: 751dd11755f151ea0a48c9cc4bb2e1f0
    SHA-256: ea9c4b8430c2c06b0210f14d0cb7632e36ba078fd48f88c970bb0a100688c5d4
    Size: 1.04 MB
  5. python3-libxml2-2.9.7-21.el8_10.10.x86_64.rpm
    MD5: e7ce22555087144ce68bbe720f4389d5
    SHA-256: f435e5efd62f857f6ae6b0addeee0f6c7de5d3cc819aac5534461683b927616c
    Size: 238.20 kB