Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2015-1283

Published: 22 July 2015

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.

From the Ubuntu Security Team

USN-2726-1 addressed CVE-2015-1283 for Expat. This update provides the corresponding fix for VNC4 on Ubuntu 14.04 ESM.

Notes

AuthorNote
ccdm94
cmake 3.20.5 and forward uses expat 2.2.10+.

Priority

Medium

Status

Package Release Status
cmake
Launchpad, Ubuntu, Debian
upstream Needs triage

trusty Does not exist
(trusty was ignored [code-not-compiled])
jammy Not vulnerable
(code-not-compiled)
vivid Not vulnerable
(code-not-compiled)
kinetic Not vulnerable
(code-not-compiled)
precise Not vulnerable
(code-not-compiled)
artful Not vulnerable
(code-not-compiled)
bionic Not vulnerable
(code-not-compiled)
cosmic Not vulnerable
(code-not-compiled)
disco Not vulnerable
(code-not-compiled)
eoan Not vulnerable
(code-not-compiled)
focal Not vulnerable
(code-not-compiled)
groovy Not vulnerable
(code-not-compiled)
hirsute Not vulnerable
(code-not-compiled)
impish Not vulnerable
(code-not-compiled)
lunar Not vulnerable
(code-not-compiled)
utopic Not vulnerable
(code-not-compiled)
wily Not vulnerable
(code-not-compiled)
xenial Not vulnerable
(code-not-compiled)
yakkety Not vulnerable
(code-not-compiled)
zesty Not vulnerable
(code-not-compiled)
ghostscript
Launchpad, Ubuntu, Debian
upstream Needs triage

trusty Does not exist
(trusty was ignored [code-not-compiled])
jammy Not vulnerable
(code-not-compiled)
vivid Not vulnerable
(code-not-compiled)
kinetic Not vulnerable
(code-not-compiled)
precise Not vulnerable
(code-not-compiled)
artful Not vulnerable
(code-not-compiled)
bionic Not vulnerable
(code-not-compiled)
cosmic Not vulnerable
(code-not-compiled)
disco Not vulnerable
(code-not-compiled)
eoan Not vulnerable
(code-not-compiled)
focal Not vulnerable
(code-not-compiled)
groovy Not vulnerable
(code-not-compiled)
hirsute Not vulnerable
(code-not-compiled)
impish Not vulnerable
(code-not-compiled)
lunar Not vulnerable
(code-not-compiled)
utopic Not vulnerable
(code-not-compiled)
wily Not vulnerable
(code-not-compiled)
xenial Not vulnerable
(code-not-compiled)
yakkety Not vulnerable
(code-not-compiled)
zesty Not vulnerable
(code-not-compiled)
texlive-bin
Launchpad, Ubuntu, Debian
upstream Needs triage

trusty Does not exist
(trusty was ignored [code-not-compiled])
jammy Not vulnerable
(code-not-compiled)
vivid Not vulnerable
(code-not-compiled)
kinetic Not vulnerable
(code-not-compiled)
precise Not vulnerable
(code-not-compiled)
artful Not vulnerable
(code-not-compiled)
bionic Not vulnerable
(code-not-compiled)
cosmic Not vulnerable
(code-not-compiled)
disco Not vulnerable
(code-not-compiled)
eoan Not vulnerable
(code-not-compiled)
focal Not vulnerable
(code-not-compiled)
groovy Not vulnerable
(code-not-compiled)
hirsute Not vulnerable
(code-not-compiled)
impish Not vulnerable
(code-not-compiled)
lunar Not vulnerable
(code-not-compiled)
utopic Not vulnerable
(code-not-compiled)
wily Not vulnerable
(code-not-compiled)
xenial Not vulnerable
(code-not-compiled)
yakkety Not vulnerable
(code-not-compiled)
zesty Not vulnerable
(code-not-compiled)
libparagui1.1
Launchpad, Ubuntu, Debian
upstream Needs triage

trusty Does not exist

utopic Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

impish Does not exist

groovy Does not exist

jammy Does not exist

precise Ignored
(end of life)
eoan Does not exist

focal Does not exist

hirsute Does not exist

kinetic Does not exist

lunar Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

ayttm
Launchpad, Ubuntu, Debian
upstream Needed

trusty Does not exist
(trusty was needed)
utopic Ignored
(end of life)
wily Ignored
(end of life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

groovy Does not exist

xenial Needed

precise Ignored
(end of life)
eoan Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

vivid Ignored
(end of life)
yakkety Ignored
(end of life)
zesty Does not exist

audacity
Launchpad, Ubuntu, Debian
trusty Does not exist
(trusty was not-affected [uses system expat])
artful Not vulnerable
(uses system expat)
bionic Not vulnerable
(uses system expat)
cosmic Not vulnerable
(uses system expat)
disco Not vulnerable
(uses system expat)
eoan Not vulnerable
(uses system expat)
focal Not vulnerable
(uses system expat)
vivid Ignored
(end of life)
groovy Not vulnerable
(uses system expat)
kinetic Ignored
(end of life, was needs-triage)
precise Not vulnerable
(uses system expat)
hirsute Not vulnerable
(uses system expat)
impish Not vulnerable
(uses system expat)
jammy Not vulnerable
(uses system expat)
lunar Needs triage

upstream Needs triage

utopic Not vulnerable
(uses system expat)
wily Not vulnerable
(uses system expat)
xenial Not vulnerable
(uses system expat)
yakkety Not vulnerable
(uses system expat)
zesty Not vulnerable
(uses system expat)
vtk
Launchpad, Ubuntu, Debian
eoan Does not exist

focal Does not exist

trusty Not vulnerable
(uses system expat)
groovy Does not exist

vivid Ignored
(end of life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

precise Ignored
(end of life)
upstream Needs triage

utopic Ignored
(end of life)
wily Ignored
(end of life)
xenial Not vulnerable
(uses system expat)
yakkety Does not exist

zesty Does not exist

smart
Launchpad, Ubuntu, Debian
upstream Needs triage

trusty Does not exist
(trusty was ignored [code-not-compiled])
focal Does not exist

groovy Does not exist

vivid Not vulnerable
(code-not-compiled)
precise Not vulnerable
(code-not-compiled)
artful Not vulnerable
(code-not-compiled)
bionic Not vulnerable
(code-not-compiled)
cosmic Not vulnerable
(code-not-compiled)
disco Not vulnerable
(code-not-compiled)
eoan Not vulnerable
(code-not-compiled)
hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

utopic Not vulnerable
(code-not-compiled)
wily Not vulnerable
(code-not-compiled)
xenial Not vulnerable
(code-not-compiled)
yakkety Not vulnerable
(code-not-compiled)
zesty Not vulnerable
(code-not-compiled)
matanza
Launchpad, Ubuntu, Debian
vivid Ignored
(end of life)
groovy Ignored
(end of life)
kinetic Ignored
(end of life, was needed)
impish Ignored
(end of life)
precise Ignored
(end of life)
artful Ignored
(end of life)
bionic Needed

cosmic Ignored
(end of life)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needed

hirsute Ignored
(end of life)
jammy Needed

lunar Needed

trusty Does not exist
(trusty was needed)
upstream Needed

utopic Ignored
(end of life)
wily Ignored
(end of life)
xenial Needed

yakkety Ignored
(end of life)
zesty Ignored
(end of life)
expat
Launchpad, Ubuntu, Debian
impish Not vulnerable
(2.1.0-7)
groovy Not vulnerable
(2.1.0-7)
jammy Not vulnerable
(2.1.0-7)
kinetic Not vulnerable
(2.1.0-7)
artful Not vulnerable
(2.1.0-7)
bionic Not vulnerable
(2.1.0-7)
cosmic Not vulnerable
(2.1.0-7)
disco Not vulnerable
(2.1.0-7)
eoan Not vulnerable
(2.1.0-7)
focal Not vulnerable
(2.1.0-7)
hirsute Not vulnerable
(2.1.0-7)
lunar Not vulnerable
(2.1.0-7)
precise
Released (2.0.1-7.2ubuntu1.2)
trusty
Released (2.1.0-4ubuntu1.1)
upstream Not vulnerable
(2.1.0-7)
utopic Ignored
(end of life, was needed)
vivid
Released (2.1.0-6ubuntu1.1)
wily Not vulnerable
(2.1.0-7)
xenial Not vulnerable
(2.1.0-7)
yakkety Not vulnerable
(2.1.0-7)
zesty Not vulnerable
(2.1.0-7)
Patches:

other: https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c
apache2
Launchpad, Ubuntu, Debian
impish Not vulnerable
(code-not-compiled)
artful Not vulnerable
(code-not-compiled)
bionic Not vulnerable
(code-not-compiled)
cosmic Not vulnerable
(code-not-compiled)
disco Not vulnerable
(code-not-compiled)
eoan Not vulnerable
(code-not-compiled)
jammy Not vulnerable
(code-not-compiled)
vivid Not vulnerable
(code-not-compiled)
kinetic Not vulnerable
(code-not-compiled)
focal Not vulnerable
(code-not-compiled)
groovy Not vulnerable
(code-not-compiled)
hirsute Not vulnerable
(code-not-compiled)
lunar Not vulnerable
(code-not-compiled)
precise Not vulnerable
(code-not-compiled)
trusty Not vulnerable
(code-not-compiled)
upstream Needs triage

utopic Not vulnerable
(code-not-compiled)
wily Not vulnerable
(code-not-compiled)
xenial Not vulnerable
(code-not-compiled)
yakkety Not vulnerable
(code-not-compiled)
zesty Not vulnerable
(code-not-compiled)
apr-util
Launchpad, Ubuntu, Debian
impish Not vulnerable
(code-not-compiled)
jammy Not vulnerable
(code-not-compiled)
vivid Not vulnerable
(code-not-compiled)
kinetic Not vulnerable
(code-not-compiled)
artful Not vulnerable
(code-not-compiled)
bionic Not vulnerable
(code-not-compiled)
cosmic Not vulnerable
(code-not-compiled)
disco Not vulnerable
(code-not-compiled)
eoan Not vulnerable
(code-not-compiled)
focal Not vulnerable
(code-not-compiled)
groovy Not vulnerable
(code-not-compiled)
hirsute Not vulnerable
(code-not-compiled)
lunar Not vulnerable
(code-not-compiled)
precise Not vulnerable
(code-not-compiled)
trusty Not vulnerable
(code-not-compiled)
upstream Needs triage

utopic Not vulnerable
(code-not-compiled)
wily Not vulnerable
(code-not-compiled)
xenial Not vulnerable
(code-not-compiled)
yakkety Not vulnerable
(code-not-compiled)
zesty Not vulnerable
(code-not-compiled)
poco
Launchpad, Ubuntu, Debian
impish Not vulnerable
(uses system expat)
groovy Not vulnerable
(uses system expat)
jammy Not vulnerable
(uses system expat)
kinetic Not vulnerable
(uses system expat)
precise Not vulnerable
(uses system expat)
artful Not vulnerable
(uses system expat)
bionic Not vulnerable
(uses system expat)
cosmic Not vulnerable
(uses system expat)
disco Not vulnerable
(uses system expat)
eoan Not vulnerable
(uses system expat)
focal Not vulnerable
(uses system expat)
hirsute Not vulnerable
(uses system expat)
lunar Not vulnerable
(uses system expat)
trusty Not vulnerable
(uses system expat)
upstream Needs triage

utopic Not vulnerable
(uses system expat)
vivid Ignored
(end of life)
wily Not vulnerable
(uses system expat)
xenial Not vulnerable
(uses system expat)
yakkety Not vulnerable
(uses system expat)
zesty Not vulnerable
(uses system expat)
sitecopy
Launchpad, Ubuntu, Debian
impish Not vulnerable
(uses system expat)
groovy Not vulnerable
(uses system expat)
jammy Not vulnerable
(uses system expat)
vivid Ignored
(end of life)
kinetic Not vulnerable
(uses system expat)
precise Ignored
(end of life)
artful Ignored
(end of life)
bionic Not vulnerable
(uses system expat)
cosmic Not vulnerable
(uses system expat)
disco Not vulnerable
(uses system expat)
eoan Not vulnerable
(uses system expat)
focal Not vulnerable
(uses system expat)
hirsute Not vulnerable
(uses system expat)
lunar Not vulnerable
(uses system expat)
trusty Does not exist
(trusty was not-affected [uses system expat])
upstream Needed

utopic Ignored
(end of life)
wily Ignored
(end of life)
xenial Not vulnerable
(uses system expat)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
swish-e
Launchpad, Ubuntu, Debian
groovy Ignored
(end of life)
kinetic Ignored
(end of life, was needed)
vivid Ignored
(end of life)
impish Ignored
(end of life)
precise Ignored
(end of life)
artful Ignored
(end of life)
bionic Needed

cosmic Ignored
(end of life)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needed

hirsute Ignored
(end of life)
jammy Needed

lunar Needed

trusty Does not exist
(trusty was needed)
upstream Needed

utopic Ignored
(end of life)
wily Ignored
(end of life)
xenial Needed

yakkety Ignored
(end of life)
zesty Ignored
(end of life)
cadaver
Launchpad, Ubuntu, Debian
hirsute Ignored
(end of life)
groovy Ignored
(end of life)
xenial Needed

kinetic Ignored
(end of life, was needed)
impish Ignored
(end of life)
precise Ignored
(end of life)
artful Ignored
(end of life)
bionic Needed

cosmic Ignored
(end of life)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needed

jammy Needed

lunar Needed

trusty Does not exist
(trusty was needed)
upstream Needed

utopic Ignored
(end of life)
vivid Ignored
(end of life)
wily Ignored
(end of life)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
chromium-browser
Launchpad, Ubuntu, Debian
groovy
Released (44.0.2403.89-0ubuntu1.1195)
jammy
Released (44.0.2403.89-0ubuntu1.1195)
vivid
Released (44.0.2403.89-0ubuntu0.15.04.1.1177)
kinetic
Released (44.0.2403.89-0ubuntu1.1195)
trusty
Released (44.0.2403.89-0ubuntu0.14.04.1.1095)
artful
Released (44.0.2403.89-0ubuntu1.1195)
bionic
Released (44.0.2403.89-0ubuntu1.1195)
cosmic
Released (44.0.2403.89-0ubuntu1.1195)
disco
Released (44.0.2403.89-0ubuntu1.1195)
eoan
Released (44.0.2403.89-0ubuntu1.1195)
focal
Released (44.0.2403.89-0ubuntu1.1195)
hirsute
Released (44.0.2403.89-0ubuntu1.1195)
impish
Released (44.0.2403.89-0ubuntu1.1195)
lunar
Released (44.0.2403.89-0ubuntu1.1195)
precise Ignored

upstream
Released (44.0.2403.89)
utopic Ignored
(end of life, was needed)
wily
Released (44.0.2403.89-0ubuntu1.1195)
xenial
Released (44.0.2403.89-0ubuntu1.1195)
yakkety
Released (44.0.2403.89-0ubuntu1.1195)
zesty
Released (44.0.2403.89-0ubuntu1.1195)
Patches:
upstream: https://codereview.chromium.org/1224303003

oxide-qt
Launchpad, Ubuntu, Debian
groovy Does not exist

jammy Does not exist

vivid
Released (1.8.4-0ubuntu0.15.04.1)
kinetic Does not exist

trusty
Released (1.8.4-0ubuntu0.14.04.1)
artful
Released (1.8.4-0ubuntu1)
bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

lunar Does not exist

precise Does not exist

upstream
Released (1.8.4)
utopic Ignored
(end of life, was needed)
wily
Released (1.8.4-0ubuntu1)
xenial
Released (1.8.4-0ubuntu1)
yakkety
Released (1.8.4-0ubuntu1)
zesty
Released (1.8.4-0ubuntu1)
wxwidgets2.6
Launchpad, Ubuntu, Debian
groovy Does not exist

jammy Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

kinetic Does not exist

lunar Does not exist

precise Ignored
(end of life)
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

vnc4
Launchpad, Ubuntu, Debian
groovy Does not exist

jammy Does not exist

kinetic Does not exist

trusty
Released (4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
artful Ignored
(end of life)
bionic Needed

cosmic Ignored
(end of life)
disco Not vulnerable
(transitional package)
eoan Not vulnerable
(transitional package)
focal Does not exist

hirsute Does not exist

impish Does not exist

lunar Does not exist

precise Ignored
(end of life)
upstream Needs triage

utopic Ignored
(end of life)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial
Released (4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1)
Available with Ubuntu Pro
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
tla
Launchpad, Ubuntu, Debian
groovy Not vulnerable
(uses system expat)
jammy Not vulnerable
(uses system expat)
kinetic Not vulnerable
(uses system expat)
artful Ignored
(end of life)
bionic Not vulnerable
(uses system expat)
cosmic Not vulnerable
(uses system expat)
disco Not vulnerable
(uses system expat)
eoan Not vulnerable
(uses system expat)
focal Not vulnerable
(uses system expat)
hirsute Not vulnerable
(uses system expat)
impish Not vulnerable
(uses system expat)
lunar Not vulnerable
(uses system expat)
precise Ignored
(end of life)
trusty Does not exist
(trusty was not-affected [uses system expat])
upstream Not vulnerable
(uses system expat)
utopic Ignored
(end of life)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial Not vulnerable
(uses system expat)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
wbxml2
Launchpad, Ubuntu, Debian
groovy Not vulnerable
(code not present)
jammy Not vulnerable
(code not present)
vivid Ignored
(end of life)
artful Ignored
(end of life)
bionic Not vulnerable
(code not present)
cosmic Not vulnerable
(code not present)
disco Not vulnerable
(code not present)
eoan Not vulnerable
(code not present)
focal Not vulnerable
(code not present)
hirsute Not vulnerable
(code not present)
impish Not vulnerable
(code not present)
kinetic Not vulnerable
(code not present)
lunar Not vulnerable
(code not present)
precise Ignored
(end of life)
trusty Does not exist
(trusty was not-affected [code not present])
upstream Needed

utopic Ignored
(end of life)
wily Ignored
(end of life)
xenial Not vulnerable
(code not present)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
kompozer
Launchpad, Ubuntu, Debian
groovy Does not exist

precise Ignored
(end of life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

insighttoolkit
Launchpad, Ubuntu, Debian
groovy Does not exist

vivid Ignored
(end of life)
precise Ignored
(end of life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist
(trusty was needed)
upstream Needed

utopic Ignored
(end of life)
wily Ignored
(end of life)
xenial Needed

yakkety Does not exist

zesty Does not exist

gdcm
Launchpad, Ubuntu, Debian
groovy Not vulnerable
(uses system expat)
vivid Ignored
(end of life)
precise Not vulnerable
(uses system expat)
artful Not vulnerable
(uses system expat)
bionic Not vulnerable
(uses system expat)
cosmic Not vulnerable
(uses system expat)
disco Not vulnerable
(uses system expat)
eoan Not vulnerable
(uses system expat)
focal Not vulnerable
(uses system expat)
hirsute Not vulnerable
(uses system expat)
impish Not vulnerable
(uses system expat)
jammy Not vulnerable
(uses system expat)
kinetic Not vulnerable
(uses system expat)
lunar Not vulnerable
(uses system expat)
trusty Not vulnerable
(uses system expat)
upstream Needs triage

utopic Not vulnerable
(uses system expat)
wily Not vulnerable
(uses system expat)
xenial Not vulnerable
(uses system expat)
yakkety Not vulnerable
(uses system expat)
zesty Not vulnerable
(uses system expat)
cableswig
Launchpad, Ubuntu, Debian
groovy Does not exist

xenial Needed

precise Ignored
(end of life)
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

trusty Does not exist
(trusty was needed)
upstream Needed

utopic Ignored
(end of life, was needed)
vivid Ignored
(end of life)
wily Ignored
(end of life)
yakkety Does not exist

zesty Does not exist

simgear
Launchpad, Ubuntu, Debian
groovy Not vulnerable
(uses system expat)
vivid Ignored
(end of life)
precise Ignored
(end of life)
artful Not vulnerable
(uses system expat)
bionic Not vulnerable
(uses system expat)
cosmic Not vulnerable
(uses system expat)
disco Not vulnerable
(uses system expat)
eoan Not vulnerable
(uses system expat)
focal Not vulnerable
(uses system expat)
hirsute Not vulnerable
(uses system expat)
impish Not vulnerable
(uses system expat)
jammy Not vulnerable
(uses system expat)
kinetic Not vulnerable
(uses system expat)
lunar Not vulnerable
(uses system expat)
trusty Does not exist
(trusty was not-affected [uses system expat])
upstream Needs triage

utopic Not vulnerable
(uses system expat)
wily Not vulnerable
(uses system expat)
xenial Not vulnerable
(uses system expat)
yakkety Not vulnerable
(uses system expat)
zesty Not vulnerable
(uses system expat)
tdom
Launchpad, Ubuntu, Debian
groovy Not vulnerable
(uses system expat)
vivid Ignored
(end of life)
precise Ignored
(end of life)
artful Ignored
(end of life)
bionic Not vulnerable
(uses system expat)
cosmic Not vulnerable
(uses system expat)
disco Not vulnerable
(uses system expat)
eoan Not vulnerable
(uses system expat)
focal Not vulnerable
(uses system expat)
hirsute Not vulnerable
(uses system expat)
impish Not vulnerable
(uses system expat)
jammy Not vulnerable
(uses system expat)
kinetic Not vulnerable
(uses system expat)
lunar Not vulnerable
(uses system expat)
trusty Does not exist
(trusty was not-affected [uses system expat])
upstream Needs triage

utopic Ignored
(end of life)
wily Ignored
(end of life)
xenial Not vulnerable
(uses system expat)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
coin3
Launchpad, Ubuntu, Debian
groovy Ignored
(end of life)
xenial Needed

kinetic Ignored
(end of life, was needed)
impish Ignored
(end of life)
precise Ignored
(end of life)
bionic Needed

artful Ignored
(end of life)
cosmic Ignored
(end of life)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needed

hirsute Ignored
(end of life)
jammy Needed

lunar Needed

trusty Needed

upstream Needed

utopic Ignored
(end of life)
vivid Ignored
(end of life)
wily Ignored
(end of life)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
libxmltok
Launchpad, Ubuntu, Debian
kinetic Ignored
(end of life, was needed)
bionic
Released (1.2-4ubuntu0.18.04.1~esm1)
Available with Ubuntu Pro
focal
Released (1.2-4ubuntu0.20.04.1~esm1)
Available with Ubuntu Pro
hirsute Ignored
(end of life)
impish Ignored
(end of life)
jammy
Released (1.2-4ubuntu0.22.04.1~esm1)
Available with Ubuntu Pro
lunar Needed

trusty Ignored
(end of standard support)
upstream Needs triage

xenial
Released (1.2-3ubuntu0.16.04.1~esm2)
Available with Ubuntu Pro
xmlrpc-c
Launchpad, Ubuntu, Debian
kinetic Ignored
(end of life, was needed)
jammy Needed

vivid Ignored
(end of life)
impish Ignored
(end of life)
artful Ignored
(end of life)
bionic Needed

cosmic Ignored
(end of life)
disco Ignored
(end of life)
eoan Ignored
(end of life)
focal Needed

groovy Ignored
(end of life)
hirsute Ignored
(end of life)
lunar Needed

precise
Released (1.16.33-3.1ubuntu5.2)
trusty Needed

upstream Needs triage

utopic Ignored
(end of life, was needed)
wily Ignored
(end of life)
xenial Needed

yakkety Ignored
(end of life)
zesty Ignored
(end of life)
wxwidgets2.8
Launchpad, Ubuntu, Debian
jammy Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

kinetic Does not exist

lunar Does not exist

precise Ignored
(end of life)
trusty Does not exist
(trusty was not-affected [uses system expat])
upstream Not vulnerable
(uses system expat)
utopic Ignored
(end of life)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial Does not exist

yakkety Does not exist

zesty Does not exist

xotcl
Launchpad, Ubuntu, Debian
jammy Not vulnerable
(uses system expat)
artful Ignored
(end of life)
bionic Not vulnerable
(uses system expat)
cosmic Not vulnerable
(uses system expat)
disco Not vulnerable
(uses system expat)
eoan Not vulnerable
(uses system expat)
focal Not vulnerable
(uses system expat)
groovy Not vulnerable
(uses system expat)
hirsute Not vulnerable
(uses system expat)
impish Not vulnerable
(uses system expat)
kinetic Not vulnerable
(uses system expat)
lunar Not vulnerable
(uses system expat)
precise Ignored
(end of life)
trusty Does not exist
(trusty was not-affected [uses system expat])
upstream Not vulnerable

utopic Ignored
(end of life)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial Not vulnerable
(uses system expat)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)