tocsin

Debian/libxml2: high 7.5

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute

Action: Upgrade libxml2 to 2.9.3+dfsg1-1.1 or later.

Affected

introducedfixedlast affected
02.9.3+dfsg1-1.1-

Fixed versions

2.9.3+dfsg1-1.1

Sources

published · modified · JSON