Ubuntu 7361-1: Libxslt Security Advisory Updates

ubuntu

March 20, 2025

Libxslt could be made to crash or run programs if it opened a specially crafted file.

Summary

Libxslt could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- libxslt: XSLT processing library

Details:

Ivan Fratric discovered that Libxslt incorrectly handled certain memory

operations when handling documents. A remote attacker could use this issue

to cause Libxslt to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics Covered

security advisory denial of service libxslt Ubuntu 20.04 Ubuntu 22.04 Ubuntu 24.04

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   libxslt1.1                      1.1.39-0exp1ubuntu1.2

Ubuntu 24.04 LTS
   libxslt1.1                      1.1.39-0exp1ubuntu0.24.04.2

Ubuntu 22.04 LTS
   libxslt1.1                      1.1.34-4ubuntu0.22.04.3

Ubuntu 20.04 LTS
   libxslt1.1                      1.1.34-4ubuntu0.20.04.3

In general, a standard system update will make all the necessary changes.