USN-6658-2: libxml2 vulnerability
Severity
medium
Vendor
VMware Tanzu
Versions Affected
- Canonical Ubuntu 18.04
- Cflinuxfs3
Description
USN-6658-1 fixed a vulnerability in libxml2. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that libxml2 incorrectly handled certain XML documents. A remote attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code. Update Instructions: Run `sudo pro fix USN-6658-2` to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: libxml2 - 2.9.3+dfsg1-1ubuntu0.7+esm6 libxml2-utils - 2.9.3+dfsg1-1ubuntu0.7+esm6 libxml2-doc - 2.9.3+dfsg1-1ubuntu0.7+esm6 python-libxml2 - 2.9.3+dfsg1-1ubuntu0.7+esm6 libxml2-dev - 2.9.3+dfsg1-1ubuntu0.7+esm6 Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro.
Fixed VMware Products and Versions
- Cflinuxfs3
- 0.388.0 or greater
- Operations Manager Image
- 2.10.71 or greater
- Platform Automation Toolkit
- 4.4.32 or greater
- 5.0.25 or greater
- 5.1.2 or greater
- Tanzu Greenplum for Kubernetes
- 2.0.0 or greater
- Xenial Stemcells
- 621.897 or greater
- CF Deployment
- 30.0.0 or greater
- Operation Manager
- 2.10.71 or greater
References
https://ubuntu.com/security/notices/USN-6658-2
https://www.cloudfoundry.org/blog/usn-6658-2
https://cve.mitre.org/cgi-bin/cvename.cgi?name=usn-6658-2
History
2024-03-11: Initial vulnerability report published.