tocsin

Alpine/expat: high 7.5

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

Action: Upgrade expat to 2.6.2-r0 or later.

Affected

introducedfixedlast affected
02.6.2-r0-

Fixed versions

2.6.2-r0

Sources

published · modified · JSON