tocsin

Alpine/expat: high 7.5

libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.

Action: Upgrade expat to 2.6.0-r0 or later.

Affected

introducedfixedlast affected
02.6.0-r0-

Fixed versions

2.6.0-r0

Sources

published · modified · JSON