Medium USN-4132-1 1 CVE

expat vulnerability

Published Sep 12, 2019 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Expat incorrectly handled certain XML files.
An attacker could possibly use this issue to expose sensitive information.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	expat	2.1.0-7ubuntu0.16.04.5
Ubuntu · 18.04 LTS 18.04:LTS	expat	2.2.5-3ubuntu0.2

Vulnerabilities 1

Medium 6.5

CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing to…

chromium-browser thunderbird firefox thunderbird Debian Ubuntu Alpine

Sep 4, 2019

References

report
https://ubuntu.com/security/CVE-2019-15903