tocsin

Alpine/expat: unknown

Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XML_ExternalEntityParserC

Action: Upgrade expat to 2.8.4-r0 or later.

Affected

introducedfixedlast affected
02.8.4-r0-

Fixed versions

2.8.4-r0

Sources

published · modified · JSON