Summary
USN-4132-1 fixed a vulnerability in Expat. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that Expat incorrectly handled certain XML files.
An attacker could possibly use this issue to expose sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | expat | 2.1.0-4ubuntu1.4+esm2 |
Vulnerabilities 1
-
Medium 6.5
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing to…
References
-
report
https://ubuntu.com/security/CVE-2019-15903