USN-7467-1: libxml2 vulnerabilities

USN-7467-1: libxml2 vulnerabilities
28 April 2025

Several security issues were fixed in libxml2.

Releases
Ubuntu 25.04
Ubuntu 24.10
Ubuntu 24.04 LTS
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS

Packages
libxml2 - GNOME XML library

Details
It was discovered that the libxml2 Python bindings incorrectly handled
certain return values. An attacker could possibly use this issue to cause
libxml2 to crash, resulting in a denial of service. (CVE-2025-32414)

It was discovered that libxml2 incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to cause
libxml2 to crash, resulting in a denial of service. (CVE-2025-32415)

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 25.04

• libxml2 - 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1
• python3-libxml2 - 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1
  Ubuntu 24.10
• libxml2 - 2.12.7+dfsg-3ubuntu0.3
• python3-libxml2 - 2.12.7+dfsg-3ubuntu0.3
  Ubuntu 24.04
• libxml2 - 2.9.14+dfsg-1.3ubuntu3.3
• python3-libxml2 - 2.9.14+dfsg-1.3ubuntu3.3
  Ubuntu 22.04
• libxml2 - 2.9.13+dfsg-1ubuntu0.7
• python3-libxml2 - 2.9.13+dfsg-1ubuntu0.7
  Ubuntu 20.04
• libxml2 - 2.9.10+dfsg-5ubuntu0.20.04.10
• python3-libxml2 - 2.9.10+dfsg-5ubuntu0.20.04.10
  In general, a standard system update will make all the necessary changes.