A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libxml2-staticUpgrade libxml2-debuginfoUpgrade libxml2-develUpgrade libxml2-pythonUpgrade libxml2 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libxml2Upgrade libxml2-staticUpgrade python3-libxml2Upgrade python3-libxml2-debuginfoUpgrade libxml2-debugsourceUpgrade libxml2-develUpgrade libxml2-debuginfo | Mar 9, 2026 | Feb 2, 2026 |
| Debian | — | Upgrade libxml2 | Jun 9, 2026 | Jun 9, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 2, 2026 |
| Suse | — | Upgrade libxslt1Upgrade libxml2-toolsUpgrade libexslt0Upgrade libxslt-toolsUpgrade libxml2-devel-32bitUpgrade python313-libxml2Upgrade libxml2-develUpgrade python3-libxml2-pythonUpgrade python3-libxml2Upgrade libxml2-docUpgrade python311-libxml2Upgrade libxml2-2-32bitUpgrade python-libxml2Upgrade libxslt-develUpgrade libxml2-2 | Feb 18, 2026 | Feb 17, 2026 |
| Ubuntu | — | Upgrade libxml2-16Upgrade libxml2-devUpgrade python3-libxml2Upgrade libxml2-utilsUpgrade libxml2-source | Jun 23, 2026 | Jun 22, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 29, 2026 | Feb 2, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub