USN-7896-1

Dashboard / Vulnerabilities / USN-7896-1

USN-7896-1

Summary: libxml2 vulnerabilities

Details: It was discovered that the libxml2 Python bindings incorrectly handled certain return values. An attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. (CVE-2025-32414) It was discovered that libxml2 incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. (CVE-2025-32415) It was discovered that libxslt, used by libxml2, incorrectly handled certain attributes. An attacker could use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. This update adds a fix to libxml2 to mitigate the libxslt vulnerability. (CVE-2025-7425)

References: https://ubuntu.com/security/notices/USN-7896-1, https://ubuntu.com/security/CVE-2025-7425, https://ubuntu.com/security/CVE-2025-32414, https://ubuntu.com/security/CVE-2025-32415