Summary
Xisco Fauli discovered that libxml2 incorrectly handled custom SAX
handlers. A remote attacker could possibly use this issue to perform XML
External Entity (XXE) attacks.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.10 | libxml2 | 2.12.7+dfsg-3ubuntu0.1 |
References
-
report
https://ubuntu.com/security/CVE-2024-40896