Ubuntu: 1153-1 Moderate: libxml2 Denial Of Service Advisory

ubuntu

June 16, 2011

libxml2 could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

libxml2 could be made to crash or run programs as your login if it opened a

specially crafted file.

Software Description:

- libxml2: GNOME XML library

Details:

Chris Evans discovered that libxml2 incorrectly handled memory allocation.

If an application using libxml2 opened a specially crafted XML file, an

attacker could cause a denial of service or possibly execute code as the

user invoking the program.

Topics Covered

security advisory denial of service code execution Ubuntu memory management libxml2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  libxml2                         2.7.8.dfsg-2ubuntu0.1

Ubuntu 10.10:
  libxml2                         2.7.7.dfsg-4ubuntu0.2

Ubuntu 10.04 LTS:
  libxml2                         2.7.6.dfsg-1ubuntu1.2

Ubuntu 8.04 LTS:
  libxml2                         2.6.31.dfsg-2ubuntu1.6

After a standard system update you need to restart your session to make
all the necessary changes.