Ubuntu 12.04 LTS USN-1782-1 Critical: libxml2 Denial of Service

ubuntu

March 28, 2013

libxml2 could be made to hang if it received specially crafted input.

Summary

libxml2 could be made to hang if it received specially crafted input.

Software Description:

- libxml2: GNOME XML library

Details:

It was discovered that libxml2 incorrectly handled XML entity expansion.

An attacker could use this flaw to cause libxml2 to consume large amounts

of resources, resulting in a denial of service.

Topics Covered

security advisory denial of service critical Ubuntu libxml2 resource consumption

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  libxml2                         2.8.0+dfsg1-5ubuntu2.2

Ubuntu 12.04 LTS:
  libxml2                         2.7.8.dfsg-5.1ubuntu4.4

Ubuntu 11.10:
  libxml2                         2.7.8.dfsg-4ubuntu0.6

Ubuntu 10.04 LTS:
  libxml2                         2.7.6.dfsg-1ubuntu1.8

Ubuntu 8.04 LTS:
  libxml2                         2.6.31.dfsg-2ubuntu1.12

After a standard system update you need to reboot your computer to make
all the necessary changes.