Skip to content
OpenAdvisories
High RHSA-2026:69655 1 CVE

Red Hat Security Advisory: libxml2 security, bug fix, and enhancement update

Published Sep 22, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream libxml2-debuginfo 0:2.9.7-21.el8_10.8
Red Hat · RHEL 8 enterprise_linux:8::appstream libxml2-debugsource 0:2.9.7-21.el8_10.8
Red Hat · RHEL 8 enterprise_linux:8::appstream libxml2-devel 0:2.9.7-21.el8_10.8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-libxml2-debuginfo 0:2.9.7-21.el8_10.8
Red Hat · RHEL 8 enterprise_linux:8::baseos libxml2 0:2.9.7-21.el8_10.8
Red Hat · RHEL 8 enterprise_linux:8::baseos libxml2-debuginfo 0:2.9.7-21.el8_10.8
Red Hat · RHEL 8 enterprise_linux:8::baseos libxml2-debugsource 0:2.9.7-21.el8_10.8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-libxml2 0:2.9.7-21.el8_10.8
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-libxml2-debuginfo 0:2.9.7-21.el8_10.8

Vulnerabilities 1

  • High 7.0
    CVE-2026-6653

    libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling

    Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.

    GNOME libxml2 libxml2 libxml2 Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2491354
  • article
    https://issues.redhat.com/browse/RHEL-249282
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69655.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-6653
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-6653
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-6653
  • article
    https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260
  • article
    https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058