{"id":"CVE-2026-6653","aliases":["ALSA-2026:61247","ALSA-2026:69655","BELL-CVE-2026-6653","CLSA-2026-1785316608","CLSA-2026-1785317036","CLSA-2026-1785317328","CLSA-2026-1787732374","CLSA-2026-1789202279","CLSA-2026-1789473529","DEBIAN-CVE-2026-6653","EUVD-2026-38232","GHSA-v4qw-p44r-qhfg","JLSEC-2026-1240","RHSA-2026:61247","RHSA-2026:69655","RLSA-2026:61247","RLSA-2026:69655","ROOT-OS-DEBIAN-11-CVE-2026-6653","ROOT-OS-DEBIAN-12-CVE-2026-6653","ROOT-OS-DEBIAN-13-CVE-2026-6653","UBUNTU-CVE-2026-6653","USN-8456-1"],"status":"published","title":"libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling","description":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.","severity":{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00355,"percentile":0.29486,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416","CWE-611"],"published":"2026-06-22T00:00:00Z","modified":"2026-10-29T11:32:31Z","fixes":[{"ecosystem":"Alpaquita:23","package":"libxml2","fixed_in":["2.10.4-r10"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libxml2","fixed_in":["2.11.4-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"libxml2","fixed_in":["2.10.4-r10"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","fixed_in":["2.11.4-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2","fixed_in":["2.9.7-18.el8.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-devel","fixed_in":["2.9.7-18.el8.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-static","fixed_in":["2.9.7-18.el8.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libxml2","fixed_in":["2.9.7-18.el8.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-devel","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-static","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-devel","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-static","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2","fixed_in":["2.9.13-12.el9_6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-devel","fixed_in":["2.9.13-12.el9_6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-static","fixed_in":["2.9.13-12.el9_6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libxml2","fixed_in":["2.9.13-12.el9_6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.14.5+dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Julia","package":"XML2_jll","fixed_in":["2.11.5+0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libxml2","fixed_in":["0:2.9.7-21.el8_10.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"libxml2","fixed_in":["2.9.10+dfsg-6.7+deb11u10.aikido.9"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-libxml2","fixed_in":["2.9.10+dfsg-6.7+deb11u10.aikido.9"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3~deb12u6.root.io.16","2.9.14+dfsg-1.3~deb12u6.aikido.17","2.9.14+dfsg-1.3~deb12u6.aikido.18","2.9.14+dfsg-1.3~deb12u6.aikido.19","2.9.14+dfsg-1.3~deb12u6.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-libxml2","fixed_in":["2.9.14+dfsg-1.3~deb12u6.root.io.16","2.9.14+dfsg-1.3~deb12u6.aikido.17","2.9.14+dfsg-1.3~deb12u6.aikido.18","2.9.14+dfsg-1.3~deb12u6.aikido.19","2.9.14+dfsg-1.3~deb12u6.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.14","2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.13","2.12.7+dfsg+really2.9.14-2.1+deb13u3.root.io.12","2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.15","2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.16"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.14","2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.13","2.12.7+dfsg+really2.9.14-2.1+deb13u3.root.io.12","2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.15","2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","fixed_in":["2.9.13+dfsg-1ubuntu0.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3ubuntu3.8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-21.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-21.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-21.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Alpaquita:23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.10.4-r10"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.11.4-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.10.4-r10"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.11.4-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.10+tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.3+dfsg-0exp1","2.12.5+dfsg-0exp1","2.12.6+dfsg-0exp1","2.12.6+dfsg-0exp2","2.12.7+dfsg+really2.9.14-0.1","2.12.7+dfsg+really2.9.14-0.2","2.12.7+dfsg+really2.9.14-0.3","2.12.7+dfsg+really2.9.14-0.4","2.12.7+dfsg+really2.9.14-1","2.12.7+dfsg+really2.9.14-2","2.12.7+dfsg+really2.9.14-2.1","2.12.7+dfsg-1","2.12.7+dfsg-2","2.12.7+dfsg-3","2.13.1+dfsg-0exp1","2.13.3+dfsg-0exp1","2.13.3+dfsg-0exp2","2.14.1+dfsg-0exp1","2.14.2+dfsg-0exp1","2.14.3+dfsg-0exp1","2.14.3+dfsg-0exp2","2.14.3+dfsg-0exp3","2.14.4+dfsg-0exp1","2.14.5+dfsg-0.1","2.14.5+dfsg-0.2","2.14.5+dfsg-0exp1","2.14.5+dfsg-0exp2","2.14.6+dfsg-0.1","2.15.0+dfsg-0.1","2.15.0+dfsg-0.2","2.15.0+dfsg-0.3","2.15.1+dfsg-0.1","2.15.1+dfsg-0.2","2.15.1+dfsg-0.3","2.15.1+dfsg-0.4","2.15.1+dfsg-0.5","2.15.1+dfsg-1","2.15.1+dfsg-2","2.15.2+dfsg-0.1","2.15.3+dfsg-1","2.15.4+dfsg-1","2.9.14+dfsg-1.2","2.9.14+dfsg-1.3","2.9.14+dfsg-1.3~deb12u1","2.9.14+dfsg-1.3~deb12u2","2.9.14+dfsg-1.3~deb12u3","2.9.14+dfsg-1.3~deb12u4","2.9.14+dfsg-1.3~deb12u5","2.9.14+dfsg-1.3~deb12u6"]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.7+dfsg+really2.9.14-2.1","2.12.7+dfsg+really2.9.14-2.1+deb13u1","2.12.7+dfsg+really2.9.14-2.1+deb13u2","2.12.7+dfsg+really2.9.14-2.1+deb13u3","2.13.1+dfsg-0exp1","2.13.3+dfsg-0exp1","2.13.3+dfsg-0exp2","2.14.1+dfsg-0exp1","2.14.2+dfsg-0exp1","2.14.3+dfsg-0exp1","2.14.3+dfsg-0exp2","2.14.3+dfsg-0exp3","2.14.4+dfsg-0exp1","2.14.5+dfsg-0.1","2.14.5+dfsg-0.2","2.14.5+dfsg-0exp1","2.14.5+dfsg-0exp2","2.14.6+dfsg-0.1","2.15.0+dfsg-0.1","2.15.0+dfsg-0.2","2.15.0+dfsg-0.3","2.15.1+dfsg-0.1","2.15.1+dfsg-0.2","2.15.1+dfsg-0.3","2.15.1+dfsg-0.4","2.15.1+dfsg-0.5","2.15.1+dfsg-1","2.15.1+dfsg-2","2.15.2+dfsg-0.1","2.15.3+dfsg-1","2.15.4+dfsg-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.5+dfsg-0.1"}]}],"versions":["2.12.7+dfsg+really2.9.14-2.1","2.13.1+dfsg-0exp1","2.13.3+dfsg-0exp1","2.13.3+dfsg-0exp2","2.14.1+dfsg-0exp1","2.14.2+dfsg-0exp1","2.14.3+dfsg-0exp1","2.14.3+dfsg-0exp2","2.14.3+dfsg-0exp3","2.14.4+dfsg-0exp1","2.14.5+dfsg-0exp1","2.14.5+dfsg-0exp2"]},{"source":"osv","ecosystem":"Julia","package":"XML2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.11.5+0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxml2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-libxml2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.13-14.el9_8.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.7-21.el8_10.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.7+deb11u10.aikido.9"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.7+deb11u10.aikido.9"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.root.io.16"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.aikido.17"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.aikido.18"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.aikido.19"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.root.io.16"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.aikido.17"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.aikido.18"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.aikido.19"},{"fixed":"2.9.14+dfsg-1.3~deb12u6.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.14"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.13"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.root.io.12"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.15"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.16"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.14"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.13"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.root.io.12"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.15"},{"fixed":"2.12.7+dfsg+really2.9.14-2.1+deb13u3.aikido.16"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.12"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4","2.9.13+dfsg-1ubuntu0.5","2.9.13+dfsg-1ubuntu0.6","2.9.13+dfsg-1ubuntu0.7","2.9.13+dfsg-1ubuntu0.8","2.9.13+dfsg-1ubuntu0.9","2.9.13+dfsg-1ubuntu0.10","2.9.13+dfsg-1ubuntu0.11"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.8"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3","2.9.14+dfsg-1.3ubuntu3.1","2.9.14+dfsg-1.3ubuntu3.2","2.9.14+dfsg-1.3ubuntu3.3","2.9.14+dfsg-1.3ubuntu3.4","2.9.14+dfsg-1.3ubuntu3.5","2.9.14+dfsg-1.3ubuntu3.6","2.9.14+dfsg-1.3ubuntu3.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.12"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4","2.9.13+dfsg-1ubuntu0.5","2.9.13+dfsg-1ubuntu0.6","2.9.13+dfsg-1ubuntu0.7","2.9.13+dfsg-1ubuntu0.8","2.9.13+dfsg-1ubuntu0.9","2.9.13+dfsg-1ubuntu0.10","2.9.13+dfsg-1ubuntu0.11"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.8"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3","2.9.14+dfsg-1.3ubuntu3.1","2.9.14+dfsg-1.3ubuntu3.2","2.9.14+dfsg-1.3ubuntu3.3","2.9.14+dfsg-1.3ubuntu3.4","2.9.14+dfsg-1.3ubuntu3.5","2.9.14+dfsg-1.3ubuntu3.6","2.9.14+dfsg-1.3ubuntu3.7"]}],"products":[{"vendor":"gnome","product":"libxml2"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260","tags":["issue-tracking","Exploit","Issue Tracking","Third Party Advisory","report","web","article"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058","tags":["issue-tracking","Exploit","Issue Tracking","Patch","report","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6653","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-v4qw-p44r-qhfg"},{"url":"https://access.redhat.com/errata/RHSA-2026:61247","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-11979","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6653","tags":["report"]},{"url":"https://bugzilla.redhat.com/2491354","tags":["report"]},{"url":"https://bugzilla.redhat.com/2494191","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-61247.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69655","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-69655.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-6653","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1785316608.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1785317036.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1785317328.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1787732374.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1789202279.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86144","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1789473529.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/6xxx/CVE-2026-6653.json","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-6653","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2494191","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61247.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6653","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-11979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11979","tags":["advisory"]},{"url":"https://cert.pl/en/posts/2026/06/CVE-2026-11979","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-249282","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69655.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:61247","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:69655","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-6653","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8456-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-6653","title":"libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling","description":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.","status":"published","published":"2026-06-22T12:40:31.424Z","modified":"2026-06-22T15:51:11.554Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"high","assessor":"cna"}],"cwes":["CWE-416","CWE-611"],"updated_at":"2026-11-02T13:49:53.818886Z"}],"euvd":[{"id":"EUVD-2026-38232","description":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.","status":"published","published":"2026-06-22T12:40:31Z","modified":"2026-06-22T15:51:11Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"high"}],"updated_at":"2026-11-02T18:20:34.745289Z"}],"ghsa":[{"id":"GHSA-v4qw-p44r-qhfg","title":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0...","description":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.","status":"published","published":"2026-06-22T15:30:45Z","modified":"2026-07-14T18:31:47Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:09:27.635559Z"}],"nvd":[{"id":"CVE-2026-6653","description":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.","status":"published","published":"2026-06-22T14:17:51.113Z","modified":"2026-10-25T23:10:00.167Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-416","CWE-611"],"updated_at":"2026-11-02T14:12:24.912854Z"}],"osv":[{"id":"BELL-CVE-2026-6653","status":"published","published":"2026-06-24T06:13:00.147263Z","modified":"2026-07-16T07:15:12.295887134Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:25.231222Z"},{"id":"CVE-2026-6653","title":"libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling","description":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.","status":"published","published":"2026-06-22T12:40:31.424Z","modified":"2026-10-28T02:31:04.509352829Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"high"}],"cwes":["CWE-416","CWE-611"],"updated_at":"2026-11-02T15:45:14.46177Z"},{"id":"DEBIAN-CVE-2026-6653","description":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.","status":"published","published":"2026-06-22T14:17:51.113Z","modified":"2026-10-26T11:47:27.177996181Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:58.699079Z"},{"id":"JLSEC-2026-1240","description":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.","status":"published","published":"2026-08-10T01:45:29.909Z","modified":"2026-08-10T02:00:04.259188425Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"RHSA-2026:61247","title":"Red Hat Security Advisory: libxml2 security update","status":"published","published":"2026-08-31T10:12:07Z","modified":"2026-10-15T10:22:55Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:69655","title":"Red Hat Security Advisory: libxml2 security, bug fix, and enhancement update","status":"published","published":"2026-09-22T10:20:08Z","modified":"2026-10-15T10:25:04Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:61247","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653)\n\n* libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-31T12:05:35.058762Z","modified":"2026-08-31T12:30:02.707848518Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:69655","title":"Moderate: libxml2 security, bug fix, and enhancement update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.\n\nSecurity Fix(es):\n\n* libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653)\n\nBug Fix(es) and Enhancement(s):\n\n* libxml2: CVE-2025-9714 fix (Rocky Linux-119279) backported wrong upstream commit ? dyn:map recursion still crashes (JIRA:Rocky Linux-249282)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-23T06:00:55.733679Z","modified":"2026-09-23T06:30:03.1425245Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-6653","description":"Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.","status":"published","published":"2026-06-22T00:00:00Z","modified":"2026-07-15T19:47:56.852001632Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:53.710209Z"},{"id":"ALSA-2026:61247","title":"Moderate: libxml2 security update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.  \n\nSecurity Fix(es):  \n\n  * libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653)\n  * libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-31T00:00:00Z","modified":"2026-10-29T11:32:31.60004447Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:69655","title":"Moderate: libxml2 security, bug fix, and enhancement update","description":"The libxml2 library is a development toolbox providing the implementation of various XML standards.  \n\nSecurity Fix(es):  \n\n  * libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free (CVE-2026-6653)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * libxml2: CVE-2025-9714 fix (AlmaLinux-119279) backported wrong upstream commit ? dyn:map recursion still crashes (JIRA:AlmaLinux-249282)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-21T00:00:00Z","modified":"2026-10-29T11:02:29.31182438Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"CLSA-2026-1785316608","title":"libxml2: Fix of CVE-2026-6653","description":"- CVE-2026-6653: fix use-after-free in xmlParseInternalSubset; xmlPushInput\n  reported EOF as failure after pushing, so the caller freed a live input","status":"published","published":"2026-07-29T09:16:59Z","modified":"2026-10-26T09:31:38.401185121Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785317036","title":"libxml2: Fix of CVE-2026-6653","description":"- CVE-2026-6653: fix use-after-free in xmlParseInternalSubset by not reporting a\n  push failure in xmlPushInput after the input was already installed","status":"published","published":"2026-07-29T09:24:06Z","modified":"2026-10-26T09:31:51.168433189Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785317328","title":"libxml2: Fix of CVE-2026-6653","description":"- CVE-2026-6653: fix use-after-free in xmlParseInternalSubset by not reporting a\n  push failure in xmlPushInput after the input was already installed","status":"published","published":"2026-07-29T09:28:59Z","modified":"2026-10-26T09:31:50.317988505Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1787732374","title":"libxml2: Fix of CVE-2026-6653","description":"- CVE-2026-6653: fix use-after-free in xmlParseInternalSubset; xmlPushInput\n  reported a halted parser as a push failure after the input was already\n  installed, so the caller freed a live input","status":"published","published":"2026-08-26T08:19:56Z","modified":"2026-10-26T09:31:31.619652373Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1789202279","title":"Fix CVE(s): CVE-2026-6653, CVE-2026-86143, CVE-2026-86144","description":"   * SECURITY UPDATE: use-after-free in the DTD parser reachable through\n     parameter-entity references\n     - debian/patches/CVE-2026-6653.patch: drop the post-inputPush\n       XML_PARSER_EOF early return from xmlPushInput() in parser.c.  It\n       reported an already-halted parser as a push failure after ownership\n       of the input had been transferred, so xmlParsePEReference() freed the\n       input still installed as ctxt-\u003einput and xmlParseInternalSubset()\n       read through the dangling pointer.  The flaw is introduced by the\n       CVE-2021-3541 backport, not by the shipped version.\n     - CVE-2026-6653","status":"published","published":"2026-09-24T07:01:14Z","modified":"2026-10-26T09:43:12.482842088Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789473529","title":"libxml2: Fix of CVE-2026-6653","description":"- CVE-2026-6653: fix use-after-free in xmlParseInternalSubset by not reporting\n  a halted parser as an xmlPushInput failure after the input was installed","status":"published","published":"2026-09-15T11:59:00Z","modified":"2026-10-26T09:30:46.670419623Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-6653","title":"CVE-2026-6653 in libxml2 - Patched by Root","description":"Root has patched CVE-2026-6653 in the libxml2 package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-10T10:22:04Z","modified":"2026-09-10T11:15:06.91387345Z","updated_at":"2026-11-02T15:53:30.44348Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-6653","title":"CVE-2026-6653 in libxml2 - Patched by Root","description":"Root has patched CVE-2026-6653 in the libxml2 package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-07T08:00:13Z","modified":"2026-10-07T09:15:04.09842112Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-6653","title":"CVE-2026-6653 in libxml2 - Patched by Root","description":"Root has patched CVE-2026-6653 in the libxml2 package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-09-21T08:07:03Z","modified":"2026-09-21T09:15:02.913839896Z","updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"USN-8456-1","title":"libxml2 vulnerability","description":"Geoffrey Humphreys discovered that libxml2 had a use after free when\nparsing the internal subset of a DTD. A remote attacker could possibly use\nthis issue to cause a denial of service or possibly execute arbitrary code.","status":"published","published":"2026-06-22T12:09:55Z","modified":"2026-07-15T19:45:55.452223449Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}