Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Libxml2 crashes or allows code execution when processing XML files
published 1 year ago
Summary
A bug in the libxml2 library could cause a program using it to crash or allow an attacker to run malicious code. This issue affects systems using libxml2 and could be exploited by a malicious XML file. Update to the latest version of libxml2 to fix the issue.
What to do
- Update canonical libxml2 to version 2.9.13+dfsg-1ubuntu0.10.
- Update canonical libxml2 to version 2.9.14+dfsg-1.3ubuntu3.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | libxml2 |
< 2.9.13+dfsg-1ubuntu0.10 Fix: upgrade to 2.9.13+dfsg-1ubuntu0.10
|
| Ubuntu:24.04:LTS | canonical | libxml2 |
< 2.9.14+dfsg-1.3ubuntu3.6 Fix: upgrade to 2.9.14+dfsg-1.3ubuntu3.6
|
Original advisory text
libxml2 vulnerability
It was discovered that libxslt, used by libxml2, incorrectly handled
certain attributes. An attacker could use this issue to cause a crash,
resulting in a denial of service, or possibly execute arbitrary code. This
update adds a fix to libxml2 to mitigate the libxslt vulnerability.
certain attributes. An attacker could use this issue to cause a crash,
resulting in a denial of service, or possibly execute arbitrary code. This
update adds a fix to libxml2 to mitigate the libxslt vulnerability.
References
- https://ubuntu.com/security/notices/USN-7852-1 Vendor Advisory
Timeline
Published30 Oct 2025
Updated24 Apr 2026
First seen24 Apr 2026
Sources
USN-7852-1 · OSV
Track software like this
Free during beta