Package : expat
Version : 2.1.0-6+deb8u6
CVE IDs : CVE-2019-15903
Debian Bug : #939394
It was discovered that there was a heap-based buffer overread
vulnerability in expat, an XML parsing library.
A specially-crafted XML input could fool the parser into changing
from DTD parsing to document parsing too early; a consecutive call to
XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then
resulted in a heap-based buffer overread.
For Debian 8 "Jessie", this issue has been fixed in expat version
2.1.0-6+deb8u6.
We recommend that you upgrade your expat packages.
Regards,
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 8 | amd64 | libexpat1-dev | < 2.1.0-6+deb8u6 | libexpat1-dev_2.1.0-6+deb8u6_amd64.deb |
Debian | 8 | i386 | expat | < 2.1.0-6+deb8u6 | expat_2.1.0-6+deb8u6_i386.deb |
Debian | 8 | amd64 | libexpat1-udeb | < 2.1.0-6+deb8u6 | libexpat1-udeb_2.1.0-6+deb8u6_amd64.deb |
Debian | 8 | amd64 | expat | < 2.1.0-6+deb8u6 | expat_2.1.0-6+deb8u6_amd64.deb |
Debian | 8 | armel | expat | < 2.1.0-6+deb8u6 | expat_2.1.0-6+deb8u6_armel.deb |
Debian | 8 | i386 | libexpat1-udeb | < 2.1.0-6+deb8u6 | libexpat1-udeb_2.1.0-6+deb8u6_i386.deb |
Debian | 8 | all | expat | < 2.1.0-6+deb8u6 | expat_2.1.0-6+deb8u6_all.deb |
Debian | 8 | amd64 | libexpat1 | < 2.1.0-6+deb8u6 | libexpat1_2.1.0-6+deb8u6_amd64.deb |
Debian | 8 | armhf | expat | < 2.1.0-6+deb8u6 | expat_2.1.0-6+deb8u6_armhf.deb |
Debian | 8 | i386 | lib64expat1 | < 2.1.0-6+deb8u6 | lib64expat1_2.1.0-6+deb8u6_i386.deb |