OESA-2026-3884

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3884

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-3884.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2026-3884

Upstream

CVE (4)

Published

2026-09-20T13:22:53Z

Modified

2026-09-20T13:30:13Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

libxml2 security update

Details

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.

Security Fix(es):

Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)(CVE-2026-17705)

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.(CVE-2026-86137)

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.(CVE-2026-86138)

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.(CVE-2026-86140)

Database specific

{
    "severity":  "High"
}

References

Affected packages

openEuler:22.03-LTS-SP4 / libxml2

Package

Name: libxml2
Purl: pkg:rpm/openEuler/libxml2&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.9.14-33.oe2203sp4

Ecosystem specific

{
    "aarch64":  [
        "libxml2-2.9.14-33.oe2203sp4.aarch64.rpm",
        "libxml2-debuginfo-2.9.14-33.oe2203sp4.aarch64.rpm",
        "libxml2-debugsource-2.9.14-33.oe2203sp4.aarch64.rpm",
        "libxml2-devel-2.9.14-33.oe2203sp4.aarch64.rpm",
        "python3-libxml2-2.9.14-33.oe2203sp4.aarch64.rpm"
    ],
    "noarch":  [
        "libxml2-help-2.9.14-33.oe2203sp4.noarch.rpm"
    ],
    "src":  [
        "libxml2-2.9.14-33.oe2203sp4.src.rpm"
    ],
    "x86_64":  [
        "libxml2-2.9.14-33.oe2203sp4.x86_64.rpm",
        "libxml2-debuginfo-2.9.14-33.oe2203sp4.x86_64.rpm",
        "libxml2-debugsource-2.9.14-33.oe2203sp4.x86_64.rpm",
        "libxml2-devel-2.9.14-33.oe2203sp4.x86_64.rpm",
        "python3-libxml2-2.9.14-33.oe2203sp4.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-3884.json"