libxml2 vulnerabilities
Published: Mon, 22 Jun 2026 17:10
Summary
Several security issues were fixed in libxml2.
Details
It was discovered that libxml2 did not properly release memory allocated in the xmllint utility. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-1757) A type confusion vulnerability was found in libxml2 when processing a specially crafted XML document. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-6732)
Recommended actions per Ubuntu release
StackPatch playbook auto-generated per release codename and per affected package.
Ubuntu questing
libxml2→2.14.5+dfsg-0.2ubuntu0.2apt_upgradeStandard apt upgrade. Install 2.14.5+dfsg-0.2ubuntu0.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2
Most apt upgrades restart their service automatically. needrestart lists anything else.
libxml2-16→2.14.5+dfsg-0.2ubuntu0.2apt_upgradeStandard apt upgrade. Install 2.14.5+dfsg-0.2ubuntu0.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2-16
Most apt upgrades restart their service automatically. needrestart lists anything else.
libxml2-dev→2.14.5+dfsg-0.2ubuntu0.2apt_upgradeStandard apt upgrade. Install 2.14.5+dfsg-0.2ubuntu0.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2-dev
Most apt upgrades restart their service automatically. needrestart lists anything else.
libxml2-doc→2.14.5+dfsg-0.2ubuntu0.2apt_upgradeStandard apt upgrade. Install 2.14.5+dfsg-0.2ubuntu0.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2-doc
Most apt upgrades restart their service automatically. needrestart lists anything else.
libxml2-utils→2.14.5+dfsg-0.2ubuntu0.2apt_upgradeStandard apt upgrade. Install 2.14.5+dfsg-0.2ubuntu0.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2-utils
Most apt upgrades restart their service automatically. needrestart lists anything else.
python3-libxml2→2.14.5+dfsg-0.2ubuntu0.2apt_upgradeStandard apt upgrade. Install 2.14.5+dfsg-0.2ubuntu0.2 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y python3-libxml2
Most apt upgrades restart their service automatically. needrestart lists anything else.
Ubuntu resolute
libxml2→2.15.2+dfsg-0.1ubuntu0.1apt_upgradeStandard apt upgrade. Install 2.15.2+dfsg-0.1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2
Most apt upgrades restart their service automatically. needrestart lists anything else.
libxml2-16→2.15.2+dfsg-0.1ubuntu0.1apt_upgradeStandard apt upgrade. Install 2.15.2+dfsg-0.1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2-16
Most apt upgrades restart their service automatically. needrestart lists anything else.
libxml2-dev→2.15.2+dfsg-0.1ubuntu0.1apt_upgradeStandard apt upgrade. Install 2.15.2+dfsg-0.1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2-dev
Most apt upgrades restart their service automatically. needrestart lists anything else.
libxml2-doc→2.15.2+dfsg-0.1ubuntu0.1apt_upgradeStandard apt upgrade. Install 2.15.2+dfsg-0.1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2-doc
Most apt upgrades restart their service automatically. needrestart lists anything else.
libxml2-source→2.15.2+dfsg-0.1ubuntu0.1apt_upgradeStandard apt upgrade. Install 2.15.2+dfsg-0.1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2-source
Most apt upgrades restart their service automatically. needrestart lists anything else.
libxml2-utils→2.15.2+dfsg-0.1ubuntu0.1apt_upgradeStandard apt upgrade. Install 2.15.2+dfsg-0.1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libxml2-utils
Most apt upgrades restart their service automatically. needrestart lists anything else.
python3-libxml2→2.15.2+dfsg-0.1ubuntu0.1apt_upgradeStandard apt upgrade. Install 2.15.2+dfsg-0.1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y python3-libxml2
Most apt upgrades restart their service automatically. needrestart lists anything else.
Are YOU affected by USN-8460-1?
5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8460-1 (and any other live CVE) applies. Anonymous, no signup.
curl https://mindsparkstack.com/scan.sh | bash
StackPatch runs this match against YOUR installed packages every hour
Free (3 servers) / from $9/mo (14-day free trial) / Solo $9/mo / Pro $29/mo / Team $79/mo. Indie pricing.