USN-8872-1: libxmltok vulnerabilities
Ubuntu fixed libxmltok integer flaws CVE-2026-56404 and CVE-2026-56405 that can crash processes via crafted files.
Ubuntu Security Notice USN-8872-1 says Expat, bundled in the xmltok library, mishandles certain integer arithmetic. If a user or automated system opens a specially crafted file, an attacker could cause a denial of service. The issues are tracked as CVE-2026-56404 and CVE-2026-56405. The notice does not describe exploitation in the wild.
32