Ubuntu 15.10: USN-2812-1 Critical: Libxml2 Denial of Service

ubuntu

November 16, 2015

Several security issues were fixed in libxml2.

Summary

Several security issues were fixed in libxml2.

Software Description:

- libxml2: GNOME XML library

Details:

Florian Weimer discovered that libxml2 incorrectly handled certain XML

data. If a user or automated system were tricked into opening a specially

crafted document, an attacker could possibly cause resource consumption,

resulting in a denial of service. This issue only affected

Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-1819)

Michal Zalewski discovered that libxml2 incorrectly handled certain XML

data. If a user or automated system were tricked into opening a specially

crafted document, an attacker could possibly cause libxml2 to crash,

resulting in a denial of service. This issue only affected

Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 15.04. (CVE-2015-7941)

Kostya Serebryany discovered that libxml2 incorrectly handled certain XML

data. If a user or automated system were tricked into opening a specially

crafted document, an atta...

Read the Full Advisory

Topics Covered

security advisory denial of service Ubuntu update instructions libxml2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  libxml2                         2.9.2+zdfsg1-4ubuntu0.1

Ubuntu 15.04:
  libxml2                         2.9.2+dfsg1-3ubuntu0.1

Ubuntu 14.04 LTS:
  libxml2                         2.9.1+dfsg1-3ubuntu4.5

Ubuntu 12.04 LTS:
  libxml2                         2.7.8.dfsg-5.1ubuntu4.12

After a standard system update you need to reboot your computer to make
all the necessary changes.