Debian/expat: high 7.5
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references,
Action: Upgrade expat to 2.5.0-1+deb12u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.0-1+deb12u2 | - |
Fixed versions
| 2.5.0-1+deb12u2 |
Sources
published · modified · JSON