tocsin

Debian/bison: medium 5.5

GNU Bison before 3.7.1 has a use-after-free in _obstack_free in lib/obstack.c (called from gram_lex) when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input,

Action: Upgrade bison to 2:3.7.2+dfsg-1 or later.

Affected

introducedfixedlast affected
02:3.7.2+dfsg-1-

Fixed versions

2:3.7.2+dfsg-1

Sources

published · modified · JSON