tocsin

Debian/expat: unknown

expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of se

Action: Upgrade expat to 2.4.1-2 or later.

Affected

introducedfixedlast affected
02.4.1-2-

Fixed versions

2.4.1-2

Sources

published · modified · JSON