USN-7361-1: Libxslt vulnerability

USN-7361-1: Libxslt vulnerability
20 March 2025

Libxslt could be made to crash or run programs if it opened a specially crafted file.

Releases
Ubuntu 24.10 Ubuntu 24.04 LTS Ubuntu 22.04 LTS Ubuntu 20.04 LTS

Packages
libxslt - XSLT processing library

Details
Ivan Fratric discovered that Libxslt incorrectly handled certain memory
operations when handling documents. A remote attacker could use this issue
to cause Libxslt to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.10

• libxslt1.1 - 1.1.39-0exp1ubuntu1.2
  Ubuntu 24.04
• libxslt1.1 - 1.1.39-0exp1ubuntu0.24.04.2
  Ubuntu 22.04
• libxslt1.1 - 1.1.34-4ubuntu0.22.04.3
  Ubuntu 20.04
• libxslt1.1 - 1.1.34-4ubuntu0.20.04.3
  In general, a standard system update will make all the necessary changes.