Ubuntu 15.10 Moderate Advisory: libxml2 Denial of Service Threat

ubuntu

December 14, 2015

libxml2 could be made to crash if it opened a specially crafted file.

Summary

libxml2 could be made to crash if it opened a specially crafted file.

Software Description:

- libxml2: GNOME XML library

Details:

Kostya Serebryany discovered that libxml2 incorrectly handled certain

malformed documents. If a user or automated system were tricked into

opening a specially crafted document, an attacker could possibly cause

libxml2 to crash, resulting in a denial of service. (CVE-2015-5312,

CVE-2015-7497, CVE-2015-7498, CVE-2015-7499,CVE-2015-7500)

Hugh Davenport discovered that libxml2 incorrectly handled certain

malformed documents. If a user or automated system were tricked into

opening a specially crafted document, an attacker could possibly cause

libxml2 to crash, resulting in a denial of service. (CVE-2015-8241,

CVE-2015-8242)

Hanno Boeck discovered that libxml2 incorrectly handled certain

malformed documents. If a user or automated system were tricked into

opening a specially crafted document, an attacker could possibly cause

libxml2...

Read the Full Advisory

Topics Covered

security advisory moderate denial of service Ubuntu libxml2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  libxml2                         2.9.2+zdfsg1-4ubuntu0.2

Ubuntu 15.04:
  libxml2                         2.9.2+dfsg1-3ubuntu0.2

Ubuntu 14.04 LTS:
  libxml2                         2.9.1+dfsg1-3ubuntu4.6

Ubuntu 12.04 LTS:
  libxml2                         2.7.8.dfsg-5.1ubuntu4.13

After a standard system update you need to reboot your computer to make
all the necessary changes.