libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.
{ "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libexpat1-dev": "2.6.0-1", "expat": "2.6.0-1", "expat-dbgsym": "2.6.0-1", "libexpat1": "2.6.0-1", "libexpat1-dbgsym": "2.6.0-1" } ] }