An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.
{
    "binaries": [
        {
            "binary_name": "libxmlrpc-c++8",
            "binary_version": "1.33.06-0ubuntu1"
        },
        {
            "binary_name": "libxmlrpc-c++8-dev",
            "binary_version": "1.33.06-0ubuntu1"
        },
        {
            "binary_name": "libxmlrpc-core-c3",
            "binary_version": "1.33.06-0ubuntu1"
        },
        {
            "binary_name": "libxmlrpc-core-c3-dev",
            "binary_version": "1.33.06-0ubuntu1"
        },
        {
            "binary_name": "xmlrpc-api-utils",
            "binary_version": "1.33.06-0ubuntu1"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libgdcm-cil",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "libgdcm-java",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "libgdcm-tools",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "libgdcm2-dev",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "libgdcm2.6",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "libvtkgdcm-cil",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "libvtkgdcm-java",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "libvtkgdcm-tools",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "libvtkgdcm2-dev",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "libvtkgdcm2.6",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "python-gdcm",
            "binary_version": "2.6.3-3ubuntu3"
        },
        {
            "binary_name": "python-vtkgdcm",
            "binary_version": "2.6.3-3ubuntu3"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "insighttoolkit4-examples",
            "binary_version": "4.9.0-4ubuntu1.1"
        },
        {
            "binary_name": "insighttoolkit4-python",
            "binary_version": "4.9.0-4ubuntu1.1"
        },
        {
            "binary_name": "libinsighttoolkit4-dev",
            "binary_version": "4.9.0-4ubuntu1.1"
        },
        {
            "binary_name": "libinsighttoolkit4.9",
            "binary_version": "4.9.0-4ubuntu1.1"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libxmlrpc-c++8-dev",
            "binary_version": "1.33.14-1ubuntu1"
        },
        {
            "binary_name": "libxmlrpc-c++8v5",
            "binary_version": "1.33.14-1ubuntu1"
        },
        {
            "binary_name": "libxmlrpc-core-c3",
            "binary_version": "1.33.14-1ubuntu1"
        },
        {
            "binary_name": "libxmlrpc-core-c3-dev",
            "binary_version": "1.33.14-1ubuntu1"
        },
        {
            "binary_name": "xmlrpc-api-utils",
            "binary_version": "1.33.14-1ubuntu1"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libgdcm-cil",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "libgdcm-java",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "libgdcm-tools",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "libgdcm2-dev",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "libgdcm2.8",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "libvtkgdcm-cil",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "libvtkgdcm-java",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "libvtkgdcm-tools",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "libvtkgdcm2-dev",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "libvtkgdcm2.8",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "python-gdcm",
            "binary_version": "2.8.4-1build2"
        },
        {
            "binary_name": "python-vtkgdcm",
            "binary_version": "2.8.4-1build2"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "insighttoolkit4-examples",
            "binary_version": "4.12.2-dfsg1-1ubuntu1"
        },
        {
            "binary_name": "insighttoolkit4-python",
            "binary_version": "4.12.2-dfsg1-1ubuntu1"
        },
        {
            "binary_name": "libinsighttoolkit4-dev",
            "binary_version": "4.12.2-dfsg1-1ubuntu1"
        },
        {
            "binary_name": "libinsighttoolkit4.12",
            "binary_version": "4.12.2-dfsg1-1ubuntu1"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libxmlrpc-c++8-dev",
            "binary_version": "1.33.14-8build1"
        },
        {
            "binary_name": "libxmlrpc-c++8v5",
            "binary_version": "1.33.14-8build1"
        },
        {
            "binary_name": "libxmlrpc-core-c3",
            "binary_version": "1.33.14-8build1"
        },
        {
            "binary_name": "libxmlrpc-core-c3-dev",
            "binary_version": "1.33.14-8build1"
        },
        {
            "binary_name": "xmlrpc-api-utils",
            "binary_version": "1.33.14-8build1"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "insighttoolkit4-examples",
            "binary_version": "4.13.2-dfsg1-8"
        },
        {
            "binary_name": "insighttoolkit4-python3",
            "binary_version": "4.13.2-dfsg1-8"
        },
        {
            "binary_name": "libinsighttoolkit4-dev",
            "binary_version": "4.13.2-dfsg1-8"
        },
        {
            "binary_name": "libinsighttoolkit4.13",
            "binary_version": "4.13.2-dfsg1-8"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libxmlrpc-c++8-dev",
            "binary_version": "1.33.14-8build2"
        },
        {
            "binary_name": "libxmlrpc-c++8v5",
            "binary_version": "1.33.14-8build2"
        },
        {
            "binary_name": "libxmlrpc-core-c3",
            "binary_version": "1.33.14-8build2"
        },
        {
            "binary_name": "libxmlrpc-core-c3-dev",
            "binary_version": "1.33.14-8build2"
        },
        {
            "binary_name": "xmlrpc-api-utils",
            "binary_version": "1.33.14-8build2"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "insighttoolkit4-examples",
            "binary_version": "4.13.3withdata-dfsg2-1ubuntu1"
        },
        {
            "binary_name": "libinsighttoolkit4-dev",
            "binary_version": "4.13.3withdata-dfsg2-1ubuntu1"
        },
        {
            "binary_name": "libinsighttoolkit4.13",
            "binary_version": "4.13.3withdata-dfsg2-1ubuntu1"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libxmlrpc-c++8-dev",
            "binary_version": "1.33.14-10"
        },
        {
            "binary_name": "libxmlrpc-c++8v5",
            "binary_version": "1.33.14-10"
        },
        {
            "binary_name": "libxmlrpc-core-c3",
            "binary_version": "1.33.14-10"
        },
        {
            "binary_name": "libxmlrpc-core-c3-dev",
            "binary_version": "1.33.14-10"
        },
        {
            "binary_name": "xmlrpc-api-utils",
            "binary_version": "1.33.14-10"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libxmlrpc-c++8-dev",
            "binary_version": "1.33.14-12build2"
        },
        {
            "binary_name": "libxmlrpc-c++8t64",
            "binary_version": "1.33.14-12build2"
        },
        {
            "binary_name": "libxmlrpc-core-c3-dev",
            "binary_version": "1.33.14-12build2"
        },
        {
            "binary_name": "libxmlrpc-core-c3t64",
            "binary_version": "1.33.14-12build2"
        },
        {
            "binary_name": "xmlrpc-api-utils",
            "binary_version": "1.33.14-12build2"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libwbxml2-1",
            "binary_version": "0.11.10+dfsg-2"
        },
        {
            "binary_name": "libwbxml2-dev",
            "binary_version": "0.11.10+dfsg-2"
        },
        {
            "binary_name": "libwbxml2-private-dev",
            "binary_version": "0.11.10+dfsg-2"
        },
        {
            "binary_name": "libwbxml2-utils",
            "binary_version": "0.11.10+dfsg-2"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libxmlrpc-c++9",
            "binary_version": "1.59.03-7"
        },
        {
            "binary_name": "libxmlrpc-c++9-dev",
            "binary_version": "1.59.03-7"
        },
        {
            "binary_name": "libxmlrpc-core-c3-dev",
            "binary_version": "1.59.03-7"
        },
        {
            "binary_name": "libxmlrpc-core-c3t64",
            "binary_version": "1.59.03-7"
        },
        {
            "binary_name": "libxmlrpc-util-dev",
            "binary_version": "1.59.03-7"
        },
        {
            "binary_name": "libxmlrpc-util4",
            "binary_version": "1.59.03-7"
        },
        {
            "binary_name": "xmlrpc-api-utils",
            "binary_version": "1.59.03-7"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libwbxml2-1",
            "binary_version": "0.11.10+dfsg-2"
        },
        {
            "binary_name": "libwbxml2-dev",
            "binary_version": "0.11.10+dfsg-2"
        },
        {
            "binary_name": "libwbxml2-private-dev",
            "binary_version": "0.11.10+dfsg-2"
        },
        {
            "binary_name": "libwbxml2-utils",
            "binary_version": "0.11.10+dfsg-2"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libxmlrpc-c++9",
            "binary_version": "1.59.03-10.1"
        },
        {
            "binary_name": "libxmlrpc-c++9-dev",
            "binary_version": "1.59.03-10.1"
        },
        {
            "binary_name": "libxmlrpc-core-c3-dev",
            "binary_version": "1.59.03-10.1"
        },
        {
            "binary_name": "libxmlrpc-core-c3t64",
            "binary_version": "1.59.03-10.1"
        },
        {
            "binary_name": "libxmlrpc-util-dev",
            "binary_version": "1.59.03-10.1"
        },
        {
            "binary_name": "libxmlrpc-util4",
            "binary_version": "1.59.03-10.1"
        },
        {
            "binary_name": "xmlrpc-api-utils",
            "binary_version": "1.59.03-10.1"
        }
    ]
}{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "expat",
            "binary_version": "2.1.0-4ubuntu1.4+esm9"
        },
        {
            "binary_name": "lib64expat1",
            "binary_version": "2.1.0-4ubuntu1.4+esm9"
        },
        {
            "binary_name": "lib64expat1-dev",
            "binary_version": "2.1.0-4ubuntu1.4+esm9"
        },
        {
            "binary_name": "libexpat1",
            "binary_version": "2.1.0-4ubuntu1.4+esm9"
        },
        {
            "binary_name": "libexpat1-dev",
            "binary_version": "2.1.0-4ubuntu1.4+esm9"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libvtk-java",
            "binary_version": "5.8.0-14.1ubuntu3+esm1"
        },
        {
            "binary_name": "libvtk5-dev",
            "binary_version": "5.8.0-14.1ubuntu3+esm1"
        },
        {
            "binary_name": "libvtk5-qt4-dev",
            "binary_version": "5.8.0-14.1ubuntu3+esm1"
        },
        {
            "binary_name": "libvtk5.8",
            "binary_version": "5.8.0-14.1ubuntu3+esm1"
        },
        {
            "binary_name": "libvtk5.8-qt4",
            "binary_version": "5.8.0-14.1ubuntu3+esm1"
        },
        {
            "binary_name": "python-vtk",
            "binary_version": "5.8.0-14.1ubuntu3+esm1"
        },
        {
            "binary_name": "tcl-vtk",
            "binary_version": "5.8.0-14.1ubuntu3+esm1"
        },
        {
            "binary_name": "vtk-examples",
            "binary_version": "5.8.0-14.1ubuntu3+esm1"
        }
    ]
}{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "expat",
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm9"
        },
        {
            "binary_name": "lib64expat1",
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm9"
        },
        {
            "binary_name": "lib64expat1-dev",
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm9"
        },
        {
            "binary_name": "libexpat1",
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm9"
        },
        {
            "binary_name": "libexpat1-dev",
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm9"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libcoin80-dev",
            "binary_version": "3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libcoin80-runtime",
            "binary_version": "3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libcoin80v5",
            "binary_version": "3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm1"
        }
    ]
}{
    "binaries": [
        {
            "binary_name": "libvtk-java",
            "binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libvtk5-dev",
            "binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libvtk5-qt4-dev",
            "binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libvtk5.10",
            "binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libvtk5.10-qt4",
            "binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1"
        },
        {
            "binary_name": "python-vtk",
            "binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1"
        },
        {
            "binary_name": "tcl-vtk",
            "binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1"
        },
        {
            "binary_name": "vtk-examples",
            "binary_version": "5.10.1+dfsg-2.1ubuntu0.1~esm1"
        }
    ]
}{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "expat",
            "binary_version": "2.2.5-3ubuntu0.9+esm1"
        },
        {
            "binary_name": "libexpat1",
            "binary_version": "2.2.5-3ubuntu0.9+esm1"
        },
        {
            "binary_name": "libexpat1-dev",
            "binary_version": "2.2.5-3ubuntu0.9+esm1"
        }
    ]
}