[ubuntu/noble-security] libxml2 2.9.14+dfsg-1.3ubuntu3.8 (Accepted)

[Sudhakar Verma]

libxml2 (2.9.14+dfsg-1.3ubuntu3.8) noble-security; urgency=medium

  * SECURITY UPDATE: heap-use-after-free in xmlParseInternalSubset
    - debian/patches/CVE-2026-6653.patch: rework entity amplification
      checks in parser.c, parserInternals.c, SAX2.c, entities.c,
      include/libxml/entities.h and include/libxml/parser.h.
    - CVE-2026-6653

Date: 2026-06-22 09:45:19.503973+00:00
Changed-By: Sudhakar Verma <sudhakar.verma at canonical.com>
https://launchpad.net/ubuntu/+source/libxml2/2.9.14+dfsg-1.3ubuntu3.8
-------------- next part --------------
Sorry, changesfile not available.