expat 2.4.7-1ubuntu0.6 source package in Ubuntu
Changelog
expat (2.4.7-1ubuntu0.6) jammy-security; urgency=medium
* SECURITY UPDATE: denial of service via stack overflow
- debian/patches/CVE-2024-8176-pre.patch: Remove XML_DTD guards
before is_param accesses
- debian/patches/CVE-2024-8176-test-pre-1.patch: minicheck: Add
fail_unless() macro
- debian/patches/CVE-2024-8176-test-pre-2.patch: tests: Rename
_fail_unless to _assert_true for clarity
- debian/patches/CVE-2024-8176-test-pre-3.patch: minicheck: Add
simple subtest support
- debian/patches/CVE-2024-8176-1.patch: Resolve the recursion during
entity processing to prevent stack overflow
- debian/patches/CVE-2024-8176-2.patch: Stop updating event pointer
on exit for reentry
- CVE-2024-8176
-- Vyom Yadav <email address hidden> Mon, 07 Apr 2025 20:07:15 +0530
Upload details
- Uploaded by:
- Vyom Yadav
- Uploaded to:
- Jammy
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- text
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section | |
|---|---|---|---|---|
| Jammy | updates | main | text | |
| Jammy | security | main | text |
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| expat_2.4.7.orig.tar.gz | 7.9 MiB | ddc1111651cdd4095b67c9d9ed46babfb8fb64843d89ff785399f5739b84867b |
| expat_2.4.7-1ubuntu0.6.debian.tar.xz | 35.6 KiB | 6610eb8dd31c293fa7a74da8882fb54373510aa09a1a4a554af7b6891e51ee86 |
| expat_2.4.7-1ubuntu0.6.dsc | 1.5 KiB | 656d57f92a50fc96978c53440c8f8735615b6ec977d95e6468e2a3980e98c3d6 |
Available diffs
Binary packages built by this source
- expat: XML parsing C library - example application
This package contains xmlwf, an example application of expat, the C
library for parsing XML. The arguments to xmlwf are one or more
files which are each to be checked for XML well-formedness.
- expat-dbgsym: debug symbols for expat
- libexpat1: XML parsing C library - runtime library
This package contains the runtime, shared library of expat, the C
library for parsing XML. Expat is a stream-oriented parser in
which an application registers handlers for things the parser
might find in the XML document (like start tags).
- libexpat1-dbgsym: debug symbols for libexpat1
- libexpat1-dev: XML parsing C library - development kit
This package contains the header file and development libraries of
expat, the C library for parsing XML. Expat is a stream oriented XML
parser. This means that you register handlers with the parser prior
to starting the parse. These handlers are called when the parser
discovers the associated structures in the document being parsed. A
start tag is an example of the kind of structures for which you may
register handlers.
