Ubuntu alert USN-8456-1 (libxml2)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8456-1] libxml2 vulnerability
Date:
             
 
Wed, 24 Jun 2026 07:59:30 +0000
Message-ID:
             
 
<E1wcIWA-0001KR-DL@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8456-1
June 22, 2026

libxml2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

libxml2 could be made to crash or run programs if it received specially
crafted input.

Software Description:
- libxml2: GNOME XML library

Details:

Geoffrey Humphreys discovered that libxml2 had a use after free when
parsing the internal subset of a DTD. A remote attacker could possibly use
this issue to cause a denial of service or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  libxml2                         2.9.14+dfsg-1.3ubuntu3.8
  libxml2-dev                     2.9.14+dfsg-1.3ubuntu3.8
  libxml2-utils                   2.9.14+dfsg-1.3ubuntu3.8
  python3-libxml2                 2.9.14+dfsg-1.3ubuntu3.8

Ubuntu 22.04 LTS
  libxml2                         2.9.13+dfsg-1ubuntu0.12
  libxml2-dev                     2.9.13+dfsg-1ubuntu0.12
  libxml2-utils                   2.9.13+dfsg-1ubuntu0.12
  python3-libxml2                 2.9.13+dfsg-1ubuntu0.12

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8456-1
  CVE-2026-6653

Package Information:
  https://launchpad.net/ubuntu/+source/libxml2/2.9.14+dfsg-...
  https://launchpad.net/ubuntu/+source/libxml2/2.9.13+dfsg-...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=M2zc
-----END PGP SIGNATURE-----