USN-2214-1: libxml2 vulnerability

15 May 2014

libxml2 could be made to consume resources if it processed a specially crafted file.

Releases

Packages

Details

Daniel Berrange discovered that libxml2 would incorrectly perform entity
substitution even when requested not to. If a user or automated system were
tricked into opening a specially crafted document, an attacker could
possibly cause resource consumption, resulting in a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 14.04
Ubuntu 13.10
Ubuntu 12.10
Ubuntu 12.04
Ubuntu 10.04

After a standard system update you need to reboot your computer to make
all the necessary changes.

References