libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
Airlock Gateway is not affected.
Details:
libexpat is an XML parser. The parser is used exclusively by mod_dav in Apache HTTP Server. The library is installed on Airlock Gateway because it is a hard dependency of Apache HTTP Server. Since mod_dav is not used in Airlock Gateway the vulnerability can not be exploited.
No action required.