Red Hat Security Advisory

RHSA-2026:69655

libxml2 security, bug fix, and enhancement update

Released 2026-09-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libxml2-devel-2.9.7-21.el8_10.8
Red Hat Enterprise Linux BaseOS (v. 8) libxml2-2.9.7-21.el8_10.8, python3-libxml2-2.9.7-21.el8_10.8

Fixes 1 record

TI-2026-05839 CVE-2026-6653 · GHSA-v4qw-p44r-qhfg

libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling

LOW 31

Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handl…

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00355 Published 2026-06-22 Partial fix · 2.11.0 CWE-416