USN-5674-1: XML Security Library vulnerability
13 October 2022
XML Security Library could be made to crash if it opened a specially crafted file.
Releases
Packages
- xmlsec1 - XML security command line processor
Details
It was discovered that XML Security Library incorrectly handled certain
input documents. An attacker could possibly use this issue to obtain
sensitive information or cause a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
libxmlsec1
-
1.2.20-2ubuntu4+esm1
Available with Ubuntu Pro
-
xmlsec1
-
1.2.20-2ubuntu4+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.