Ubuntu 16.04 LTS: USN-2994-1 Moderate: libxml2 Denial Of Service

ubuntu

June 6, 2016

Several security issues were fixed in libxml2.

Summary

Several security issues were fixed in libxml2.

Software Description:

- libxml2: GNOME XML library

Details:

It was discovered that libxml2 incorrectly handled certain malformed

documents. If a user or automated system were tricked into opening a

specially crafted document, an attacker could possibly cause libxml2 to

crash, resulting in a denial of service. (CVE-2015-8806, CVE-2016-2073,

CVE-2016-3627, CVE-2016-3705, CVE-2016-4447)

It was discovered that libxml2 incorrectly handled certain malformed

documents. If a user or automated system were tricked into opening a

specially crafted document, an attacker could cause libxml2 to crash,

resulting in a denial of service, or possibly execute arbitrary code.

(CVE-2016-1762, CVE-2016-1834)

Mateusz Jurczyk discovered that libxml2 incorrectly handled certain

malformed documents. If a user or automated system were tricked into

opening a specially crafted document, an attacker could cause libxml2 to

crash, resultin...

Read the Full Advisory

Topics Covered

security advisory moderate denial of service ubuntu libxml2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  libxml2                         2.9.3+dfsg1-1ubuntu0.1

Ubuntu 15.10:
  libxml2                         2.9.2+zdfsg1-4ubuntu0.4

Ubuntu 14.04 LTS:
  libxml2                         2.9.1+dfsg1-3ubuntu4.8

Ubuntu 12.04 LTS:
  libxml2                         2.7.8.dfsg-5.1ubuntu4.15

After a standard system update you need to reboot your computer to make
all the necessary changes.