USN-3504-2: libxml2 vulnerability
USN-3504-2: libxml2 vulnerability Ubuntu Security Notice USN-3504-2 5th December, 2017 libxml2 vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 LTS Summary curl could be made to crash if it received specially crafted input. Software description libxml2 – GNOME XML library Details USN-3504-1 fixed a vulnerability in libxml2. This update providesthe corresponding update for Ubuntu 12.04 ESM. Original advisory details: Wei Lei discovered that libxml2 incorrecty handled certain parameter entities. An attacker could use this issue with specially constructed XML data to cause libxml2 to consume resources, leading to a denial of service. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 12.04 LTS: libxml2 2.7.8.dfsg-5.1ubuntu4.19 libxml2-utils 2.7.8.dfsg-5.1ubuntu4.19 python-libxml2 2.7.8.dfsg-5.1ubuntu4.19 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make [ more… ]