Debian/prosody: high 7.5
It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data. Given suitable attacker input, this results in
Action: Upgrade prosody to 0.11.12-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.12-1 | - |
Fixed versions
| 0.11.12-1 |
Sources
published · modified · JSON