Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Debian: DLA-1920-1 Important: XML Parser Memory Corruption

debian lts
Calendar Grey September 6, 2019
Dist Debian Esm H88
A stack-related buffer underflow issue in expat has been identified. Update to version 2.1.0-6+deb8u6 to resolve this security flaw.
It was discovered that there was a heap-based buffer overread vulnerability in expat, an XML parsing library

Summary

For Debian 8 "Jessie", this issue has been fixed in expat version
2.1.0-6+deb8u6.

We recommend that you upgrade your expat packages.


Regards,

- --
,'`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-



Severity
important
Lowest
Low
Medium
High
Critical

Package: expat
Version: 2.1.0-6+deb8u6
Debian Bug: #939394

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here