Ubuntu
expat package

expat 2.5.0-2ubuntu0.1 source package in Ubuntu

Changelog

expat (2.5.0-2ubuntu0.1) mantic-security; urgency=medium

  * SECURITY UPDATE: denial-of-service
    - debian/patches/CVE-2023-52425.patch: Speed up parsing of big tokens.
    - CVE-2023-52425
  * SECURITY UPDATE: denial-of-service
    - debian/patches/CVE-2024-28757.patch: Detect billion laughs attack with
      isolated external parser.
    - CVE-2024-28757

 -- Fabian Toepfer <email address hidden>  Wed, 13 Mar 2024 16:05:10 +0100

Upload details

Uploaded by:
Fabian Toepfer
Uploaded to:
Mantic
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
text
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic updates main text
Mantic security main text

Downloads

File Size SHA-256 Checksum
expat_2.5.0.orig.tar.gz 7.9 MiB ab00ee05c7067fd10a35c5d2a4922ebba746ddd50ff83b79c828da17bbdf1757
expat_2.5.0-2ubuntu0.1.debian.tar.xz 19.8 KiB 3d91a80da302f2141a7f88f47927ad2486fd112d5023f414c88f52233feb2654
expat_2.5.0-2ubuntu0.1.dsc 2.1 KiB a43b95a356ee3a5a0e21df3e29ddd1c4f360e58767a61d01e1822e66ef7d9bc4

View changes file

Binary packages built by this source

expat: XML parsing C library - example application

 This package contains xmlwf, an example application of expat, the C
 library for parsing XML. The arguments to xmlwf are one or more
 files which are each to be checked for XML well-formedness.

expat-dbgsym: debug symbols for expat
libexpat1: XML parsing C library - runtime library

 This package contains the runtime, shared library of expat, the C
 library for parsing XML. Expat is a stream-oriented parser in
 which an application registers handlers for things the parser
 might find in the XML document (like start tags).

libexpat1-dbgsym: debug symbols for libexpat1
libexpat1-dev: XML parsing C library - development kit

 This package contains the header file and development libraries of
 expat, the C library for parsing XML. Expat is a stream oriented XML
 parser. This means that you register handlers with the parser prior
 to starting the parse. These handlers are called when the parser
 discovers the associated structures in the document being parsed. A
 start tag is an example of the kind of structures for which you may
 register handlers.