USN-5288-1: Expat vulnerabilities

Releases

• Ubuntu 21.10
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM
• Ubuntu 14.04 ESM

Packages

• expat - XML parsing C library

Details

It was discovered that Expat incorrectly handled certain files.
An attacker could possibly use this issue to cause a crash or
execute arbitrary code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 21.10

• libexpat1 - 2.4.1-2ubuntu0.1

Ubuntu 20.04

• libexpat1 - 2.2.9-1ubuntu0.2

Ubuntu 18.04

• libexpat1 - 2.2.5-3ubuntu0.4

Ubuntu 16.04

• libexpat1 - 2.1.0-7ubuntu0.16.04.5+esm2
  Available with Ubuntu Pro
• lib64expat1 - 2.1.0-7ubuntu0.16.04.5+esm2
  Available with Ubuntu Pro

Ubuntu 14.04

• libexpat1 - 2.1.0-4ubuntu1.4+esm4
  Available with Ubuntu Pro
• lib64expat1 - 2.1.0-4ubuntu1.4+esm4
  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

• CVE-2022-22823
• CVE-2021-45960
• CVE-2022-25235
• CVE-2022-25236
• CVE-2022-22825
• CVE-2022-22827
• CVE-2022-22826
• CVE-2021-46143
• CVE-2022-23990
• CVE-2022-22824
• CVE-2022-23852
• CVE-2022-22822

Related notices

• USN-5455-1: libxmltok, libxmltok1, libxmltok1-dev