Ubuntu 20.04 LTS USN-5548-1 High: Libxml2 Code Execution Risk

ubuntu

August 4, 2022

libxml2 could be made to execute arbitrary code if it received a specially crafted file.

Summary

libxml2 could be made to execute arbitrary code if it received

a specially crafted file.

Software Description:

- libxml2: GNOME XML library

Details:

It was discovered that libxml2 incorrectly handled certain XML files.

An attacker could possibly use this issue to execute arbitrary code.

Topics Covered

security advisory code execution Ubuntu high libxml2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  libxml2                         2.9.10+dfsg-5ubuntu0.20.04.4
  libxml2-utils                   2.9.10+dfsg-5ubuntu0.20.04.4

Ubuntu 18.04 LTS:
  libxml2                         2.9.4+dfsg1-6.1ubuntu1.7
  libxml2-utils                   2.9.4+dfsg1-6.1ubuntu1.7

Ubuntu 16.04 ESM:
  libxml2                         2.9.3+dfsg1-1ubuntu0.7+esm3
  libxml2-utils                   2.9.3+dfsg1-1ubuntu0.7+esm3

In general, a standard system update will make all the necessary changes.