USN-3356-1: Expat vulnerability

Releases

• Ubuntu 17.04
• Ubuntu 16.10
• Ubuntu 16.04 ESM
• Ubuntu 14.04 ESM

Packages

• expat - XML parsing C library

Details

It was discovered that Expat incorrectly handled certain external entities.
A remote attacker could possibly use this issue to cause Expat to hang,
resulting in a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 17.04

• lib64expat1 - 2.2.0-2ubuntu0.1
• libexpat1 - 2.2.0-2ubuntu0.1

Ubuntu 16.10

• lib64expat1 - 2.2.0-1ubuntu0.1
• libexpat1 - 2.2.0-1ubuntu0.1

Ubuntu 16.04

• lib64expat1 - 2.1.0-7ubuntu0.16.04.3
• libexpat1 - 2.1.0-7ubuntu0.16.04.3

Ubuntu 14.04

• lib64expat1 - 2.1.0-4ubuntu1.4
• libexpat1 - 2.1.0-4ubuntu1.4

In general, a standard system update will make all the necessary changes.

References

• CVE-2017-9233

Related notices

• USN-3356-2: expat, lib64expat1, libexpat1
• USN-4825-1: libcoin80, libcoin80-doc, coin3, libcoin80-runtime, libcoin80v5, libcoin80-dev