Ubuntu 15.04 USN-2592-1 Critical: Libxml-libxml-perl Information Exposure

ubuntu

May 4, 2015

XML::LibXML could be made to expose sensitive information.

Summary

XML::LibXML could be made to expose sensitive information.

Software Description:

- libxml-libxml-perl: Perl interface to the libxml2 library

Details:

Tilmann Haak discovered that XML::LibXML incorrectly handled the

expand_entities parameter in certain situations. A remote attacker could

possibly use this issue to access sensitive information.

Topics Covered

security advisory critical update instructions information exposure ubuntu libxml perl library

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  libxml-libxml-perl              2.0116+dfsg-1ubuntu0.15.04.1

Ubuntu 14.10:
  libxml-libxml-perl              2.0116+dfsg-1ubuntu0.14.10.1

Ubuntu 14.04 LTS:
  libxml-libxml-perl              2.0108+dfsg-1ubuntu0.1

Ubuntu 12.04 LTS:
  libxml-libxml-perl              1.89+dfsg-1ubuntu0.1

In general, a standard system update will make all the necessary changes.