USN-4132-1: Expat vulnerability
It was discovered that Expat incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libexpat1to a version that resolves this vulnerability.Fixed in 2.2.6-1ubuntu0.19.5 - Upgrade
Upgrade
ubuntu/libexpat1to a version that resolves this vulnerability.Fixed in 2.2.5-3ubuntu0.2 - Upgrade
Upgrade
ubuntu/lib64expat1to a version that resolves this vulnerability.Fixed in 2.1.0-7ubuntu0.16.04.5 - Upgrade
Upgrade
ubuntu/libexpat1to a version that resolves this vulnerability.Fixed in 2.1.0-7ubuntu0.16.04.5
Event History
Frequently Asked Questions
What is the vulnerability ID for the Expat vulnerability?
The vulnerability ID for the Expat vulnerability is USN-4132-1.
What software is affected by the Expat vulnerability?
The Expat vulnerability affects the libexpat1 package version 2.2.6-1ubuntu0.19.5 on Ubuntu 19.04, libexpat1 package version 2.2.5-3ubuntu0.2 on Ubuntu 18.04, lib64expat1 package version 2.1.0-7ubuntu0.16.04.5 on Ubuntu 16.04.
What is the risk associated with the Expat vulnerability?
The Expat vulnerability could allow an attacker to expose sensitive information.
How can I fix the Expat vulnerability?
To fix the Expat vulnerability, update the libexpat1 package to version 2.2.6-1ubuntu0.19.5 for Ubuntu 19.04, version 2.2.5-3ubuntu0.2 for Ubuntu 18.04, and update the lib64expat1 package to version 2.1.0-7ubuntu0.16.04.5 for Ubuntu 16.04.
Where can I find more information about the Expat vulnerability?
You can find more information about the Expat vulnerability at the following references: [CVE-2019-15903](https://ubuntu.com/security/CVE-2019-15903), [USN-4202-1](https://ubuntu.com/security/notices/USN-4202-1), [USN-4335-1](https://ubuntu.com/security/notices/USN-4335-1).