[ubuntu/questing-security] libxml2 2.14.5+dfsg-0.2ubuntu0.2 (Accepted)

Kyle Kernick kyle.kernick at canonical.com
Mon Jun 22 16:08:30 UTC 2026


libxml2 (2.14.5+dfsg-0.2ubuntu0.2) questing-security; urgency=medium

  * SECURITY UPDATE: Denial of service in xmllint.
    - debian/patches/CVE-2026-1757.patch: Free the cmdline when it only
      contains whitespace in shell.c
    - CVE-2026-1757
  * SECURITY UPDATE: Denial of service in parser.
    - debian/patches/CVE-2026-6732.patch: Pass userData instead of ctxt in
      parser.c
    - CVE-2026-6732

Date: 2026-06-19 18:44:15.123557+00:00
Changed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/libxml2/2.14.5+dfsg-0.2ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Questing-changes mailing list