USN-7145-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-7145-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7145-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-7145-1

Related

Published

2024-12-10T01:42:55.370010Z

Modified

2024-12-10T01:42:55.370010Z

Summary

expat vulnerability

Details

It was discovered that Expat did not properly handle its internal state when attempting to resume an unstarted parser. An attacker could use this issue to cause a denial of service (application crash).

References

Affected packages

Ubuntu:Pro:14.04:LTS / expat

Package

Name: expat
Purl: pkg:deb/ubuntu/expat@2.1.0-4ubuntu1.4+esm10?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0-4ubuntu1.4+esm10

Affected versions

2.*

2.1.0-4

2.1.0-4ubuntu1

2.1.0-4ubuntu1.1

2.1.0-4ubuntu1.2

2.1.0-4ubuntu1.3

2.1.0-4ubuntu1.4

2.1.0-4ubuntu1.4+esm2

2.1.0-4ubuntu1.4+esm4

2.1.0-4ubuntu1.4+esm6

2.1.0-4ubuntu1.4+esm7

2.1.0-4ubuntu1.4+esm8

2.1.0-4ubuntu1.4+esm9

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "expat"
        },
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "expat-dbgsym"
        },
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "lib64expat1"
        },
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "lib64expat1-dbgsym"
        },
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "lib64expat1-dev"
        },
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "libexpat1"
        },
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "libexpat1-dbgsym"
        },
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "libexpat1-dev"
        },
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "libexpat1-udeb"
        },
        {
            "binary_version": "2.1.0-4ubuntu1.4+esm10",
            "binary_name": "libexpat1-udeb-dbgsym"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / expat

Package

Name: expat
Purl: pkg:deb/ubuntu/expat@2.1.0-7ubuntu0.16.04.5+esm10?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0-7ubuntu0.16.04.5+esm10

Affected versions

2.*

2.1.0-7

2.1.0-7ubuntu0.16.04.1

2.1.0-7ubuntu0.16.04.2

2.1.0-7ubuntu0.16.04.3

2.1.0-7ubuntu0.16.04.4

2.1.0-7ubuntu0.16.04.5

2.1.0-7ubuntu0.16.04.5+esm2

2.1.0-7ubuntu0.16.04.5+esm5

2.1.0-7ubuntu0.16.04.5+esm6

2.1.0-7ubuntu0.16.04.5+esm7

2.1.0-7ubuntu0.16.04.5+esm8

2.1.0-7ubuntu0.16.04.5+esm9

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "expat"
        },
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "expat-dbgsym"
        },
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "lib64expat1"
        },
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "lib64expat1-dbgsym"
        },
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "lib64expat1-dev"
        },
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "libexpat1"
        },
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "libexpat1-dbgsym"
        },
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "libexpat1-dev"
        },
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "libexpat1-udeb"
        },
        {
            "binary_version": "2.1.0-7ubuntu0.16.04.5+esm10",
            "binary_name": "libexpat1-udeb-dbgsym"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / expat

Package

Name: expat
Purl: pkg:deb/ubuntu/expat@2.2.5-3ubuntu0.9+esm2?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.5-3ubuntu0.9+esm2

Affected versions

2.*

2.2.3-1

2.2.3-2

2.2.5-0ubuntu2

2.2.5-3

2.2.5-3ubuntu0.1

2.2.5-3ubuntu0.2

2.2.5-3ubuntu0.4

2.2.5-3ubuntu0.7

2.2.5-3ubuntu0.8

2.2.5-3ubuntu0.9

2.2.5-3ubuntu0.9+esm1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "2.2.5-3ubuntu0.9+esm2",
            "binary_name": "expat"
        },
        {
            "binary_version": "2.2.5-3ubuntu0.9+esm2",
            "binary_name": "expat-dbgsym"
        },
        {
            "binary_version": "2.2.5-3ubuntu0.9+esm2",
            "binary_name": "libexpat1"
        },
        {
            "binary_version": "2.2.5-3ubuntu0.9+esm2",
            "binary_name": "libexpat1-dbgsym"
        },
        {
            "binary_version": "2.2.5-3ubuntu0.9+esm2",
            "binary_name": "libexpat1-dev"
        },
        {
            "binary_version": "2.2.5-3ubuntu0.9+esm2",
            "binary_name": "libexpat1-udeb"
        }
    ]
}

Ubuntu:20.04:LTS / expat

Package

Name: expat
Purl: pkg:deb/ubuntu/expat@2.2.9-1ubuntu0.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.9-1ubuntu0.8

Affected versions

2.*

2.2.7-2

2.2.9-1

2.2.9-1build1

2.2.9-1ubuntu0.2

2.2.9-1ubuntu0.4

2.2.9-1ubuntu0.5

2.2.9-1ubuntu0.6

2.2.9-1ubuntu0.7

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.2.9-1ubuntu0.8",
            "binary_name": "expat"
        },
        {
            "binary_version": "2.2.9-1ubuntu0.8",
            "binary_name": "expat-dbgsym"
        },
        {
            "binary_version": "2.2.9-1ubuntu0.8",
            "binary_name": "libexpat1"
        },
        {
            "binary_version": "2.2.9-1ubuntu0.8",
            "binary_name": "libexpat1-dbgsym"
        },
        {
            "binary_version": "2.2.9-1ubuntu0.8",
            "binary_name": "libexpat1-dev"
        },
        {
            "binary_version": "2.2.9-1ubuntu0.8",
            "binary_name": "libexpat1-udeb"
        }
    ]
}

Ubuntu:22.04:LTS / expat

Package

Name: expat
Purl: pkg:deb/ubuntu/expat@2.4.7-1ubuntu0.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.7-1ubuntu0.5

Affected versions

2.*

2.4.1-2

2.4.1-3

2.4.2-1

2.4.3-1

2.4.3-2

2.4.4-1

2.4.6-1

2.4.7-1

2.4.7-1ubuntu0.1

2.4.7-1ubuntu0.2

2.4.7-1ubuntu0.3

2.4.7-1ubuntu0.4

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.4.7-1ubuntu0.5",
            "binary_name": "expat"
        },
        {
            "binary_version": "2.4.7-1ubuntu0.5",
            "binary_name": "expat-dbgsym"
        },
        {
            "binary_version": "2.4.7-1ubuntu0.5",
            "binary_name": "libexpat1"
        },
        {
            "binary_version": "2.4.7-1ubuntu0.5",
            "binary_name": "libexpat1-dbgsym"
        },
        {
            "binary_version": "2.4.7-1ubuntu0.5",
            "binary_name": "libexpat1-dev"
        }
    ]
}

Ubuntu:24.10 / expat

Package

Name: expat
Purl: pkg:deb/ubuntu/expat@2.6.2-2ubuntu0.1?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.2-2ubuntu0.1

Affected versions

2.*

2.6.1-2build1

2.6.2-1

2.6.2-2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.6.2-2ubuntu0.1",
            "binary_name": "expat"
        },
        {
            "binary_version": "2.6.2-2ubuntu0.1",
            "binary_name": "expat-dbgsym"
        },
        {
            "binary_version": "2.6.2-2ubuntu0.1",
            "binary_name": "libexpat1"
        },
        {
            "binary_version": "2.6.2-2ubuntu0.1",
            "binary_name": "libexpat1-dbgsym"
        },
        {
            "binary_version": "2.6.2-2ubuntu0.1",
            "binary_name": "libexpat1-dev"
        }
    ]
}

Ubuntu:24.04:LTS / expat

Package

Name: expat
Purl: pkg:deb/ubuntu/expat@2.6.1-2ubuntu0.2?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.1-2ubuntu0.2

Affected versions

2.*

2.5.0-2

2.6.0-1

2.6.1-2

2.6.1-2build1

2.6.1-2ubuntu0.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "2.6.1-2ubuntu0.2",
            "binary_name": "expat"
        },
        {
            "binary_version": "2.6.1-2ubuntu0.2",
            "binary_name": "expat-dbgsym"
        },
        {
            "binary_version": "2.6.1-2ubuntu0.2",
            "binary_name": "libexpat1"
        },
        {
            "binary_version": "2.6.1-2ubuntu0.2",
            "binary_name": "libexpat1-dbgsym"
        },
        {
            "binary_version": "2.6.1-2ubuntu0.2",
            "binary_name": "libexpat1-dev"
        }
    ]
}