Ubuntu
expat package

expat 2.2.9-1ubuntu0.8 source package in Ubuntu

Changelog

expat (2.2.9-1ubuntu0.8) focal-security; urgency=medium

  * SECURITY UPDATE: denial-of-service via XML_ResumeParser
    - debian/patches/CVE-2024-50602-1.patch: Make function XML_StopParser of
      expat/lib/xmlparse.c refuse to stop/suspend an unstarted parser
    - debian/patches/CVE-2024-50602-2.patch: Add XML_PARSING case to parser
      state in function XML_StopParser of expat/lib/xmlparse.c
    - debian/patches/CVE-2024-50602-3.patch: Add tests for CVE-2024-50602 to
      expat/tests/runtests.c
    - CVE-2024-50602

 -- Nicolas Campuzano Jimenez <email address hidden>  Sun, 01 Dec 2024 22:26:34 -0500

Upload details

Uploaded by:
nicolas campuzano jimenez
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
text
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main text
Focal security main text

Downloads

File Size SHA-256 Checksum
expat_2.2.9.orig.tar.gz 7.9 MiB c341ac8c79e021cc3392a6d76e138e62d1dd287592cb455148540331756a2208
expat_2.2.9-1ubuntu0.8.debian.tar.xz 29.6 KiB dbeacb2eacb46ba4b51c9cb228bf3949f3f99b1e517fcda5b405a034d4df7e76
expat_2.2.9-1ubuntu0.8.dsc 2.1 KiB b60bb0e81a63649db56db099c640d4e2fd81aa00df045deb5734872231f2c4f7

View changes file

Binary packages built by this source

expat: XML parsing C library - example application

 This package contains xmlwf, an example application of expat, the C
 library for parsing XML. The arguments to xmlwf are one or more
 files which are each to be checked for XML well-formedness.

expat-dbgsym: debug symbols for expat
libexpat1: XML parsing C library - runtime library

 This package contains the runtime, shared library of expat, the C
 library for parsing XML. Expat is a stream-oriented parser in
 which an application registers handlers for things the parser
 might find in the XML document (like start tags).

libexpat1-dbgsym: debug symbols for libexpat1
libexpat1-dev: XML parsing C library - development kit

 This package contains the header file and development libraries of
 expat, the C library for parsing XML. Expat is a stream oriented XML
 parser. This means that you register handlers with the parser prior
 to starting the parse. These handlers are called when the parser
 discovers the associated structures in the document being parsed. A
 start tag is an example of the kind of structures for which you may
 register handlers.

libexpat1-udeb: XML parsing C library - runtime library

 This package contains the runtime, shared library of expat, the C
 library for parsing XML.