An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms (where UINTMAX equals SIZE_MAX).
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "libexpat1-dev": "2.1.0-4ubuntu1.4+esm9", "expat-dbgsym": "2.1.0-4ubuntu1.4+esm9", "lib64expat1-dev": "2.1.0-4ubuntu1.4+esm9", "libexpat1": "2.1.0-4ubuntu1.4+esm9", "libexpat1-dbgsym": "2.1.0-4ubuntu1.4+esm9", "libexpat1-udeb": "2.1.0-4ubuntu1.4+esm9", "expat": "2.1.0-4ubuntu1.4+esm9", "libexpat1-udeb-dbgsym": "2.1.0-4ubuntu1.4+esm9", "lib64expat1": "2.1.0-4ubuntu1.4+esm9", "lib64expat1-dbgsym": "2.1.0-4ubuntu1.4+esm9" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "libexpat1-dev": "2.1.0-7ubuntu0.16.04.5+esm9", "expat-dbgsym": "2.1.0-7ubuntu0.16.04.5+esm9", "lib64expat1-dev": "2.1.0-7ubuntu0.16.04.5+esm9", "libexpat1": "2.1.0-7ubuntu0.16.04.5+esm9", "libexpat1-dbgsym": "2.1.0-7ubuntu0.16.04.5+esm9", "libexpat1-udeb": "2.1.0-7ubuntu0.16.04.5+esm9", "expat": "2.1.0-7ubuntu0.16.04.5+esm9", "libexpat1-udeb-dbgsym": "2.1.0-7ubuntu0.16.04.5+esm9", "lib64expat1": "2.1.0-7ubuntu0.16.04.5+esm9", "lib64expat1-dbgsym": "2.1.0-7ubuntu0.16.04.5+esm9" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "libexpat1-dev": "2.2.5-3ubuntu0.9+esm1", "expat": "2.2.5-3ubuntu0.9+esm1", "expat-dbgsym": "2.2.5-3ubuntu0.9+esm1", "libexpat1-udeb": "2.2.5-3ubuntu0.9+esm1", "libexpat1": "2.2.5-3ubuntu0.9+esm1", "libexpat1-dbgsym": "2.2.5-3ubuntu0.9+esm1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libexpat1-dev": "2.2.9-1ubuntu0.7", "expat": "2.2.9-1ubuntu0.7", "expat-dbgsym": "2.2.9-1ubuntu0.7", "libexpat1-udeb": "2.2.9-1ubuntu0.7", "libexpat1": "2.2.9-1ubuntu0.7", "libexpat1-dbgsym": "2.2.9-1ubuntu0.7" } ] }