Back Linuxsecurity

Ubuntu libxs-parse-keyword

Linuxsecurity •LinuxSecurity Advisories • October 21, 2026

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

The Perl XS::Parse::Keyword module could be made to crash if it received specially crafted input. Software Description: - libxs-parse-keyword-perl: XS functions to assist in parsing keyword syntax Details: It was discovered that the Perl XS::Parse::Keyword module did not correctly handle certain inputs. If a user or automated system were tricked into receiving specially crafted input, an attacker could cause a denial of service.

The Perl XS::Parse::Keyword module could be made to crash if it received

specially crafted input.

Software Description:

- libxs-parse-keyword-perl: XS functions to assist in parsing keyword syntax

It was discovered that the Perl XS::Parse::Keyword module did not

correctly handle certain inputs. If a user or automated system were

tricked into receiving specially crafted input, an attacker could cause

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.10 libxs-parse-keyword-perl 0.49-1ubuntu1 Ubuntu 26.04 LTS libxs-parse-keyword-perl 0.49-1ubuntu0.1 In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8940-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Perl XS::Parse::Keyword Module Affects Ubuntu Systems A critical vulnerability has been identified in the Perl XS::Parse::Keyword module, which can lead to denial of service if exploited with specially crafted input. This flaw affects users of the libxs-parse-keyword-perl package on Ubuntu systems, specifically versions 26.10 and 26.04 LTS. Attackers could potentially crash the module, impacting any user or automated system that processes the malicious input. The vulnerability has been assigned the identifier USN-8940-1. Users are advised to update their systems to the patched versions: 0.49-1ubuntu1 for Ubuntu 26.10 and 0.49-1ubuntu0.1 for Ubuntu 26.04 LTS. A standard system update will apply the necessary changes. This vulnerability was disclosed on October 20, 2026, and the advisory was published on October 21, 2026. 2 sources 72

Ubuntu libxs-parse-keyword

The full story

Extracted Entities

Attack Types (1)

Companies (1)