USN-3739-2: libxml2 vulnerabilities
USN-3739-1 fixed a vulnerability in libxml2. This update provides the corresponding update for Ubuntu 12.04. Original advisory details: Matias Brutti discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information. (CVE-2016-9318) It was discovered that libxml2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-14404)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libxml2to a version that resolves this vulnerability.Fixed in 2.7.8.dfsg-5.1ubuntu4.21 - Upgrade
Upgrade
ubuntu/libxml2-utilsto a version that resolves this vulnerability.Fixed in 2.7.8.dfsg-5.1ubuntu4.21 - Upgrade
Upgrade
ubuntu/python-libxml2to a version that resolves this vulnerability.Fixed in 2.7.8.dfsg-5.1ubuntu4.21 - Upgrade
Upgrade
libxml2to a version that resolves this vulnerability.Patch USN-3739-2
Event History
Frequently Asked Questions
What is the vulnerability addressed in USN-3739-2?
The vulnerability addressed in USN-3739-2 is CVE-2016-9318.
What is the severity of the vulnerability?
The severity of the vulnerability is not specified.
How does the vulnerability affect libxml2?
The vulnerability affects libxml2 versions up to and including 2.7.8.dfsg-5.1ubuntu4.21.
How can I fix the vulnerability in libxml2?
To fix the vulnerability in libxml2, update to version 2.7.8.dfsg-5.1ubuntu4.21 or later.
Where can I find more information about USN-3739-2?
You can find more information about USN-3739-2 on the Ubuntu Security Notice page: [link](https://ubuntu.com/security/notices/USN-3739-2).