USN-4132-2: Expat vulnerability

Published Sep 12, 2019

Updated

USN-4132-1 fixed a vulnerability in Expat. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Expat incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information.

Affected Software

1 affected component

Expat Expat

Event History

May 10, 2025

Advisory Published

via Ubuntu·04:11 AM

Data Sourced

via Ubuntu·04:11 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2019-15903

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is USN-4132-2.

What software is affected by this vulnerability?

The libexpat1 and lib64expat1 packages on Ubuntu 12.04 and Ubuntu 14.04 are affected by this vulnerability.

What is the severity of this vulnerability?

The severity of this vulnerability is not specified.

How can I fix this vulnerability?

To fix this vulnerability, update the libexpat1 and lib64expat1 packages to version 2.1.0-4ubuntu1.4+esm2 for Ubuntu 14.04, and 2.0.1-7.2ubuntu1.7 for Ubuntu 12.04.

Where can I find more information about this vulnerability?

More information about this vulnerability can be found on the Ubuntu security advisory page: <a href="https://ubuntu.com/security/CVE-2019-15903">https://ubuntu.com/security/CVE-2019-15903</a>