[ubuntu/precise-updates] expat 2.0.1-7.2ubuntu1.7 (Accepted)

[Ubuntu Archive Robot]

expat (2.0.1-7.2ubuntu1.7) precise-security; urgency=medium

  * SECURITY UPDATE: heap-based buffer over-read
    - debian/patches/CVE-2019-15903.dpatch: Deny internal
      entities closing the doctype in lib/xmlparse.c.
    - CVE-2019-15903

expat (2.0.1-7.2ubuntu1.6) precise-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-20843.dpatch: adds a break in
      setElementTypePrefix avoiding consume a high amount of RAM
      and CPU in lib/xmlparser.c
    - CVE-2018-20843

expat (2.0.1-7.2ubuntu1.5) precise-security; urgency=medium

  * SECURITY UPDATE: external entity infinite loop
    - debian/patches/CVE-2017-9233.dpatch: add check to lib/xmlparse.c.
    - CVE-2017-9233

Date: 2019-09-12 13:59:13.835185+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/expat/2.0.1-7.2ubuntu1.7
-------------- next part --------------
Sorry, changesfile not available.