- Vulnerability/
- USN-7467-2
USN-7467-2: libxml2 vulnerabilities
First published: Mon Apr 28 2025(Updated: )
USN-7467-1 fixed several vulnerabilities in libxml2. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that the libxml2 Python bindings incorrectly handled certain return values. An attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. (CVE-2025-32414) It was discovered that libxml2 incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. (CVE-2025-32415)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libxml2 | <2.9.4+dfsg1-6.1ubuntu1.9+esm3 | 2.9.4+dfsg1-6.1ubuntu1.9+esm3 |
| Ubuntu | =18.04 | |
| All of | ||
| ubuntu/python-libxml2 | <2.9.4+dfsg1-6.1ubuntu1.9+esm3 | 2.9.4+dfsg1-6.1ubuntu1.9+esm3 |
| Ubuntu | =18.04 | |
| All of | ||
| ubuntu/python3-libxml2 | <2.9.4+dfsg1-6.1ubuntu1.9+esm3 | 2.9.4+dfsg1-6.1ubuntu1.9+esm3 |
| Ubuntu | =18.04 | |
| All of | ||
| ubuntu/libxml2 | <2.9.3+dfsg1-1ubuntu0.7+esm8 | 2.9.3+dfsg1-1ubuntu0.7+esm8 |
| Ubuntu | =16.04 | |
| All of | ||
| ubuntu/python-libxml2 | <2.9.3+dfsg1-1ubuntu0.7+esm8 | 2.9.3+dfsg1-1ubuntu0.7+esm8 |
| Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of USN-7467-2?
USN-7467-2 addresses vulnerabilities in libxml2 that may allow for potential attacks through incorrectly handled return values.
How do I fix USN-7467-2?
To mitigate the vulnerabilities addressed in USN-7467-2, upgrade libxml2 and its related Python packages to the specified remedied version.
Which Ubuntu versions are affected by USN-7467-2?
USN-7467-2 affects Ubuntu 16.04 LTS and Ubuntu 18.04 LTS with specific versions of libxml2 and its Python bindings.
What packages are impacted by USN-7467-2?
The impacted packages include libxml2, python-libxml2, and python3-libxml2 in the specified vulnerable versions.
Is there any prior notification related to USN-7467-2?
Yes, USN-7467-1 provided initial information about the vulnerabilities that USN-7467-2 updates.
- agent/references
- agent/last-modified-date
- agent/title
- agent/softwarecombine
- agent/source
- agent/type
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu
- version/ubuntu/18.04
- version/ubuntu/16.04