Ubuntu 25.04 Security Notice: libxml2 Denial of Service Risk

ubuntu

April 28, 2025

Several security issues were fixed in libxml2.

Summary

Several security issues were fixed in libxml2.

Software Description:

- libxml2: GNOME XML library

Details:

It was discovered that the libxml2 Python bindings incorrectly handled

certain return values. An attacker could possibly use this issue to cause

libxml2 to crash, resulting in a denial of service. (CVE-2025-32414)

It was discovered that libxml2 incorrectly handled certain memory

operations. A remote attacker could possibly use this issue to cause

libxml2 to crash, resulting in a denial of service. (CVE-2025-32415)

Topics Covered

security advisory denial of service software update Ubuntu libxml2 memory operations

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
   libxml2                         2.12.7+dfsg+really2.9.14-0.4ubuntu0.1
   python3-libxml2                 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1

Ubuntu 24.10
   libxml2                         2.12.7+dfsg-3ubuntu0.3
   python3-libxml2                 2.12.7+dfsg-3ubuntu0.3

Ubuntu 24.04 LTS
   libxml2                         2.9.14+dfsg-1.3ubuntu3.3
   python3-libxml2                 2.9.14+dfsg-1.3ubuntu3.3

Ubuntu 22.04 LTS
   libxml2                         2.9.13+dfsg-1ubuntu0.7
   python3-libxml2                 2.9.13+dfsg-1ubuntu0.7

Ubuntu 20.04 LTS
   libxml2                         2.9.10+dfsg-5ubuntu0.20.04.10
   python3-libxml2                 2.9.10+dfsg-5ubuntu0.20.04.10

In general, a standard system update will make all the necessary changes.