USN-5638-4: Expat vulnerabilities
Ubuntu Security Notice USN-5638-4
February 28, 2023
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 ESM
Expat could be made to crash or execute arbitrary code.
- expat: XML parsing C library
USN-5638-1 fixed several vulnerabilities in Expat. This update provides
the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
Rhodri James discovered that Expat incorrectly handled memory when
processing certain malformed XML files. An attacker could possibly
use this issue to cause a crash or execute arbitrary code.
The problem can be corrected by updating your system to the following
Ubuntu 14.04 ESM:
In general, a standard system update will make all the necessary changes.
An Expat security update has been released for Ubuntu Linux 14.04 ESM.