Debian/libxml2: medium 6.5
The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not re
Action: Upgrade libxml2 to 2.9.10+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.10+dfsg-2 | - |
Fixed versions
| 2.9.10+dfsg-2 |
Sources
published · modified · JSON