tocsin

Debian/mxml: medium 5.5

The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.

Action: Upgrade mxml to 2.9-1 or later.

Affected

introducedfixedlast affected
02.9-1-

Fixed versions

2.9-1

Sources

published · modified · JSON