Ubuntu 7357-1: Libxslt Security Advisory Updates

ubuntu

March 19, 2025

Libxslt could be made to crash or run programs if it opened a specially crafted file.

Summary

Libxslt could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- libxslt: XSLT processing library

Details:

Ivan Fratric discovered that Libxslt incorrectly handled certain memory

operations when handling documents. A remote attacker could use this issue

to cause Libxslt to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics Covered

security advisory denial of service remote code execution ubuntu libxslt memory operations

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   libxslt1.1                      1.1.39-0exp1ubuntu1.1

Ubuntu 24.04 LTS
   libxslt1.1                      1.1.39-0exp1ubuntu0.24.04.1

Ubuntu 22.04 LTS
   libxslt1.1                      1.1.34-4ubuntu0.22.04.2

Ubuntu 20.04 LTS
   libxslt1.1                      1.1.34-4ubuntu0.20.04.2

In general, a standard system update will make all the necessary changes.