Summary
Geoffrey Humphreys discovered that libxml2 had a use after free when
parsing the internal subset of a DTD. A remote attacker could possibly use
this issue to cause a denial of service or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libxml2 | 2.9.13+dfsg-1ubuntu0.12 |
| Ubuntu · 24.04 LTS 24.04:LTS | libxml2 | 2.9.14+dfsg-1.3ubuntu3.8 |
References
-
report
https://ubuntu.com/security/CVE-2026-6653