[USN-7467-1] libxml2 vulnerabilities

-----BEGIN PGP SIGNATURE-----
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=ldh4
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7467-1
April 28, 2025

libxml2 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

Several security issues were fixed in libxml2.

Software Description:
- libxml2: GNOME XML library

Details:

It was discovered that the libxml2 Python bindings incorrectly handled
certain return values. An attacker could possibly use this issue to cause
libxml2 to crash, resulting in a denial of service. (CVE-2025-32414)

It was discovered that libxml2 incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to cause
libxml2 to crash, resulting in a denial of service. (CVE-2025-32415)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
libxml2 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1
python3-libxml2 2.12.7+dfsg+really2.9.14-0.4ubuntu0.1

Ubuntu 24.10
libxml2 2.12.7+dfsg-3ubuntu0.3
python3-libxml2 2.12.7+dfsg-3ubuntu0.3

Ubuntu 24.04 LTS
libxml2 2.9.14+dfsg-1.3ubuntu3.3
python3-libxml2 2.9.14+dfsg-1.3ubuntu3.3

Ubuntu 22.04 LTS
libxml2 2.9.13+dfsg-1ubuntu0.7
python3-libxml2 2.9.13+dfsg-1ubuntu0.7

Ubuntu 20.04 LTS
libxml2 2.9.10+dfsg-5ubuntu0.20.04.10
python3-libxml2 2.9.10+dfsg-5ubuntu0.20.04.10

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7467-1
CVE-2025-32414, CVE-2025-32415

Package Information:

https://launchpad.net/ubuntu/+source/libxml2/2.12.7+dfsg+really2.9.14-0.4ubuntu0.1
https://launchpad.net/ubuntu/+source/libxml2/2.12.7+dfsg-3ubuntu0.3
https://launchpad.net/ubuntu/+source/libxml2/2.9.14+dfsg-1.3ubuntu3.3
https://launchpad.net/ubuntu/+source/libxml2/2.9.13+dfsg-1ubuntu0.7
https://launchpad.net/ubuntu/+source/libxml2/2.9.10+dfsg-5ubuntu0.20.04.10