USN-5638-1 fixed a vulnerability in Expat. This update provides the corresponding updates for Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2022-43680) This update also fixes a minor regression introduced in Ubuntu 18.04 LTS.
We apologize for the inconvenience.
Original advisory details:
Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "libexpat1-dev": "2.1.0-7ubuntu0.16.04.5+esm7", "expat-dbgsym": "2.1.0-7ubuntu0.16.04.5+esm7", "lib64expat1-dev": "2.1.0-7ubuntu0.16.04.5+esm7", "libexpat1": "2.1.0-7ubuntu0.16.04.5+esm7", "libexpat1-dbgsym": "2.1.0-7ubuntu0.16.04.5+esm7", "libexpat1-udeb": "2.1.0-7ubuntu0.16.04.5+esm7", "expat": "2.1.0-7ubuntu0.16.04.5+esm7", "libexpat1-udeb-dbgsym": "2.1.0-7ubuntu0.16.04.5+esm7", "lib64expat1": "2.1.0-7ubuntu0.16.04.5+esm7", "lib64expat1-dbgsym": "2.1.0-7ubuntu0.16.04.5+esm7" } ] }