tocsin

Debian/expat: unknown

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denia

Action: Upgrade expat to 2.1.0~beta3-1 or later.

Affected

introducedfixedlast affected
02.1.0~beta3-1-

Fixed versions

2.1.0~beta3-1

Sources

published · modified · JSON