USN-4040-1: Expat vulnerability
It was discovered that Expat incorrectly handled certain XML files. An attacker could possibly use this issue to cause a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libexpat1to a version that resolves this vulnerability.Fixed in 2.2.6-1ubuntu0.19.04 - Upgrade
Upgrade
ubuntu/libexpat1to a version that resolves this vulnerability.Fixed in 2.2.6-1ubuntu0.18.10 - Upgrade
Upgrade
ubuntu/libexpat1to a version that resolves this vulnerability.Fixed in 2.2.5-3ubuntu0.1 - Upgrade
Upgrade
ubuntu/lib64expat1to a version that resolves this vulnerability.Fixed in 2.1.0-7ubuntu0.16.04.4 - Upgrade
Upgrade
ubuntu/libexpat1to a version that resolves this vulnerability.Fixed in 2.1.0-7ubuntu0.16.04.4
Event History
Frequently Asked Questions
What is the vulnerability ID for this Expat vulnerability?
The vulnerability ID is USN-4040-1.
What is the severity of the USN-4040-1 vulnerability?
The severity of the USN-4040-1 vulnerability is not mentioned in the provided information.
How can an attacker exploit the USN-4040-1 vulnerability?
An attacker could possibly exploit the USN-4040-1 vulnerability to cause a denial of service.
Which software is affected by the USN-4040-1 vulnerability?
The affected software is libexpat1 version 2.2.6-1ubuntu0.19.04, libexpat1 version 2.2.6-1ubuntu0.18.10, libexpat1 version 2.2.5-3ubuntu0.1, lib64expat1 version 2.1.0-7ubuntu0.16.04.4, and libexpat1 version 2.1.0-7ubuntu0.16.04.4 on Ubuntu versions 19.04, 18.10, 18.04, and 16.04.
How can I fix the USN-4040-1 vulnerability?
To fix the USN-4040-1 vulnerability, update the affected software to the specified remedy versions provided by Ubuntu.