Back Linuxsecurity

Ubuntu 26.04 LTS HTML-Parser Critical Info Exposure USN-8587

Linuxsecurity •LinuxSecurity Advisories • July 22, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

HTML-Parser could be made to expose sensitive information. Software Description: - libhtml-parser-perl: collection of modules that parse HTML text documents Details: It was discovered that HTML-Parser incorrectly handled entity references when the input string was identical to an entity value in the lookup table. An attacker could possibly use this issue to obtain sensitive information.

HTML-Parser could be made to expose sensitive information.

Software Description:

- libhtml-parser-perl: collection of modules that parse HTML text documents

It was discovered that HTML-Parser incorrectly handled entity references

when the input string was identical to an entity value in the lookup table.

An attacker could possibly use this issue to obtain sensitive information.

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libhtml-parser-perl 3.83-1ubuntu0.1 Ubuntu 24.04 LTS libhtml-parser-perl 3.81-1ubuntu0.1 Ubuntu 22.04 LTS libhtml-parser-perl 3.76-1ubuntu0.1 In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8587-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in HTML-Parser Exposes Sensitive Information A critical vulnerability has been identified in the HTML-Parser library used in various Ubuntu versions. The flaw arises from improper handling of entity references, allowing attackers to potentially access sensitive information. Affected systems include Ubuntu 26.04 LTS, 24.04 LTS, and 22.04 LTS, specifically the libhtml-parser-perl package. The vulnerability can be exploited if the input string matches an entity value in the lookup table. Users are advised to update their systems to the latest package versions to mitigate this risk. The issue was disclosed on July 22, 2026, and is categorized under Ubuntu Security Notice USN-8587-1. A standard system update is recommended to apply the necessary patches. 2 sources 73

Extracted Entities

Ubuntu 26.04 LTS HTML-Parser Critical Info Exposure USN-8587

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

Platforms (1)

Tools (1)