[ubuntu/jammy-security] libxml2 2.9.13+dfsg-1ubuntu0.12 (Accepted)

Sudhakar Verma sudhakar.verma at canonical.com
Mon Jun 22 12:27:54 UTC 2026


libxml2 (2.9.13+dfsg-1ubuntu0.12) jammy-security; urgency=medium

  * SECURITY UPDATE: heap-use-after-free in xmlParseInternalSubset
    - debian/patches/CVE-2026-6653.patch: rework entity amplification
      checks in parser.c, parserInternals.c, SAX2.c, entities.c,
      include/libxml/entities.h and include/libxml/parser.h.
    - CVE-2026-6653

Date: 2026-06-22 09:45:14.091282+00:00
Changed-By: Sudhakar Verma <sudhakar.verma at canonical.com>
https://launchpad.net/ubuntu/+source/libxml2/2.9.13+dfsg-1ubuntu0.12
-------------- next part --------------
Sorry, changesfile not available.


More information about the jammy-changes mailing list