In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade expatUpgrade expat-devel | May 4, 2022 | Sep 4, 2019 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade expatUpgrade librewolfUpgrade python2Upgrade firefoxUpgrade python2-tkinter | Nov 8, 2019 | Sep 4, 2019 |
| Amazon Linux Ami 2 | — | Upgrade thunderbird-debuginfoUpgrade expat-debuginfoUpgrade expat-staticUpgrade expatUpgrade thunderbirdUpgrade expat-devel | Apr 27, 2020 | Sep 4, 2019 |
| Amazon_linux | — | Upgrade expat | Dec 19, 2020 | Sep 4, 2019 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Dec 12, 2019 | Dec 11, 2019 |
| Apple Osx Libexpat | — | Apply Apple macOS Security Update 2019-002 MojaveApply Apple macOS Security Update 2019-007 High Sierra | Dec 11, 2019 | Dec 10, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 4, 2019 |
| Centos_linux | — | Upgrade firefoxUpgrade expat-debugsourceUpgrade thunderbirdUpgrade thunderbird-debugsourceUpgrade expat-debuginfoUpgrade firefox-debugsourceUpgrade expatUpgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade expat-develUpgrade expat-static | Oct 30, 2019 | Sep 4, 2019 |
| Debian | — | Upgrade expatUpgrade firefox-esrUpgrade thunderbird | Sep 9, 2019 | Sep 4, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 3, 2022 |
| Freebsd | — | Upgrade python37 | Oct 20, 2019 | Oct 19, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/expat. | Nov 25, 2019 | Sep 4, 2019 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 9, 2022 | Oct 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade expat-develUpgrade expat | Dec 4, 2019 | Sep 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade expat-develUpgrade expat | Nov 19, 2019 | Sep 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade expat-develUpgrade expat | Nov 19, 2019 | Sep 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expatUpgrade expat-devel | Nov 19, 2019 | Sep 4, 2019 |
| Mfsa2019 33 | — | Upgrade to Mozilla Firefox ESR version 68.2Upgrade to the latest version of Mozilla Firefox | Oct 23, 2019 | Sep 4, 2019 |
| Mfsa2019 34 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 70.0 | Oct 23, 2019 | Sep 4, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.2Upgrade to the latest version of Mozilla Thunderbird | Oct 25, 2019 | Sep 4, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 68.2.0-11.4.15.0.1.4.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.17-11.4.16.0.1.2.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.2.0-11.4.15.0.1.4.0 on Solaris 11.4Upgrade mail/thunderbird to version 68.2.0-11.4.15.0.1.4.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.17-11.4.16.0.1.2.0 on Solaris 11.4Upgrade library/expat to version 2.2.9-11.4.16.0.1.1.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.17-11.4.16.0.1.2.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 68.2.0-11.4.15.0.1.4.0 on Solaris 11.4 | Nov 20, 2019 | Sep 4, 2019 |
| Oracle_linux | — | Upgrade expat-staticUpgrade expatUpgrade thunderbirdUpgrade expat-devel | Oct 30, 2019 | Sep 4, 2019 |
| Redhat_linux | — | Upgrade thunderbirdUpgrade expatUpgrade expat-debugsourceUpgrade thunderbird-debugsourceUpgrade firefoxUpgrade expat-staticUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade expat-debuginfoNo solution existsUpgrade expat-devel | Oct 30, 2019 | Sep 4, 2019 |
| Rocky_linux | — | Upgrade expat-debuginfoUpgrade expat-develUpgrade expat-debugsourceUpgrade expat | Mar 12, 2024 | Sep 4, 2019 |
| Suse | — | Upgrade firefox-glib2-langUpgrade libexpat1Upgrade firefox-libharfbuzz0Upgrade firefox-esr-branding-openSUSEUpgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nss-develUpgrade MozillaFirefox-develUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-toolsUpgrade libsoftokn3Upgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-langUpgrade MozillaFirefox-branding-openSUSEUpgrade python36Upgrade python3-tkUpgrade libexpat-devel-32bitUpgrade python3-testsuiteUpgrade mozilla-nspr-32bitUpgrade python3-toolsUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nssUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libcairo2Upgrade python3Upgrade MozillaThunderbirdUpgrade libre2-0Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-toolsUpgrade python3-cursesUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade python3-base-32bitUpgrade firefox-libgtk-3-0Upgrade chromiumUpgrade firefox-gtk3-immodule-vietnameseUpgrade python36-baseUpgrade libexpat1-32bitUpgrade python3-dbmUpgrade MozillaFirefox-branding-SLEDUpgrade libsoftokn3-32bitUpgrade firefox-libcairo-gobject2Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libre2-0-32bitUpgrade firefox-gio-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade re2-develUpgrade libfirefox-gobject-2_0-0Upgrade libpython3_6m1_0-32bitUpgrade python3-idleUpgrade libfreebl3-32bitUpgrade libfirefox-glib-2_0-0Upgrade libre2-0-64bitUpgrade python3-develUpgrade firefox-glib2-toolsUpgrade mozilla-nsprUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libffi4Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-atk-langUpgrade expatUpgrade MozillaThunderbird-translations-commonUpgrade mozillafirefox-buildsymbolsUpgrade libexpat-develUpgrade firefox-gtk3-immodule-thaiUpgrade mozillafirefox-branding-upstreamUpgrade firefox-libffi7Upgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certsUpgrade firefox-libpango-1_0-0Upgrade libfreebl3Upgrade libpython3_6m1_0Upgrade chromedriverUpgrade python3-baseUpgrade libfirefox-gio-2_0-0Upgrade MozillaFirefoxUpgrade firefox-gdk-pixbuf-langUpgrade python3-32bitUpgrade mozillafirefox-branding-sle | Sep 24, 2019 | Sep 4, 2019 |
| Ubuntu | — | Upgrade libvtk5.8 (Ubuntu Pro)Upgrade libexpat1 (Ubuntu Pro)Upgrade libvtk5.10 (Ubuntu Pro)Upgrade firefoxUpgrade libxmltok1t64 (Ubuntu Pro)Upgrade lib64expat1 (Ubuntu Pro)Upgrade libexpat1Upgrade lib64expat1Upgrade libxmltok1t64Upgrade libxmltok1 (Ubuntu Pro)Upgrade thunderbird | Sep 13, 2019 | Sep 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub