Debian/libxml2: unknown
libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote att
Action: Upgrade libxml2 to 2.8.0+dfsg1-7+nmu1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.0+dfsg1-7+nmu1 | - |
Fixed versions
| 2.8.0+dfsg1-7+nmu1 |
Sources
- osv: DEBIAN-CVE-2013-0339#Debian:13/libxml2
- https://security-tracker.debian.org/tracker/CVE-2013-0339
published · modified · JSON