Ubuntu 24.04 LTS USN-7001-2: High-Risk Libxmltok Vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS Summary: Several security issues were fixed in libxmltok. Software Description: - libxmltok: XML Parser Toolkit, developer libraries Details: USN-7001-1 fixed vulnerabilities in xmltol library. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details:  Shang-Hung Wan discovered that Expat, contained within the xmltok library,  did not properly handle certain function calls when a negative input  length was provided. An attacker could use this issue to cause a denial of  service or possibly execute arbitrary code. (CVE-2024-45490)  Shang-Hung Wan discovered that Expat, contained within the xmltok library,  did not properly handle the potential for an integer overflow on 32-bit  platforms. An attacker could use this issue to cause a denial of service  or possibly execute arbitrary code. (CVE-2024-45491)