tocsin

Debian/libxml2: unknown

libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption

Action: Upgrade libxml2 to 2.7.8.dfsg-8 or later.

Affected

introducedfixedlast affected
02.7.8.dfsg-8-

Fixed versions

2.7.8.dfsg-8

Sources

published · modified · JSON