Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Ubuntu Libxml2 Important DoS and Memory Leak Issues USN-8460-1

ubuntu
Calendar Grey June 22, 2026
Dist Ubuntu Esm H88
Several security issues in libxml2 for Ubuntu fixed. Critical updates required to avoid denial of service.
Several security issues were fixed in libxml2.

Summary

Several security issues were fixed in libxml2.

Software Description:

- libxml2: GNOME XML library

Details:

It was discovered that libxml2 did not properly release memory allocated in

the xmllint utility. An attacker could possibly use this issue to cause a

denial of service. (CVE-2026-1757)

A type confusion vulnerability was found in libxml2 when processing a

specially crafted XML document. A remote attacker could possibly use this

issue to cause a denial of service. (CVE-2026-6732)

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libxml2-16                      2.15.2+dfsg-0.1ubuntu0.1
  libxml2-dev                     2.15.2+dfsg-0.1ubuntu0.1
  libxml2-source                  2.15.2+dfsg-0.1ubuntu0.1
  libxml2-utils                   2.15.2+dfsg-0.1ubuntu0.1
  python3-libxml2                 2.15.2+dfsg-0.1ubuntu0.1

Ubuntu 25.10
  libxml2-16                      2.14.5+dfsg-0.2ubuntu0.2
  libxml2-dev                     2.14.5+dfsg-0.2ubuntu0.2
  libxml2-utils                   2.14.5+dfsg-0.2ubuntu0.2
  python3-libxml2                 2.14.5+dfsg-0.2ubuntu0.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8460-1

CVE-2026-1757, CVE-2026-6732

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8460-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here