Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 24.10, 24.04 LTS, 22.04 LTS: USN-7424-1 critical: Expat crash

ubuntu
Calendar Grey April 8, 2025
Dist Ubuntu Esm H88
Investigate the significant Expat security flaw that poses a risk across various Ubuntu versions and discover the process for updating your operating system.
Expat could be made to crash if it received specially crafted input.

Summary

Expat could be made to crash if it received specially crafted

input.

Software Description:

- expat: XML parsing C library

Details:

It was discovered that Expat could crash due to stack overflow when

processing XML documents with deeply nested entity references. If a user

or automated system were tricked into processing specially crafted XML

input, an attacker could use this issue to cause a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service update ubuntu crash expat

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   expat                           2.6.2-2ubuntu0.2
   libexpat1                       2.6.2-2ubuntu0.2

Ubuntu 24.04 LTS
   expat                           2.6.1-2ubuntu0.3
   libexpat1                       2.6.1-2ubuntu0.3

Ubuntu 22.04 LTS
   expat                           2.4.7-1ubuntu0.6
   libexpat1                       2.4.7-1ubuntu0.6

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7424-1

  CVE-2024-8176

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7424-1

Topics%20covered

Topics Covered

security advisory denial of service update ubuntu crash expat

Package Information

  https://launchpad.net/ubuntu/+source/expat/2.6.2-2ubuntu0.2
  https://launchpad.net/ubuntu/+source/expat/2.6.1-2ubuntu0.3
  https://launchpad.net/ubuntu/+source/expat/2.4.7-1ubuntu0.6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here