[ubuntu/noble-security] expat 2.6.1-2ubuntu0.3 (Accepted)

[Vyom Yadav]

expat (2.6.1-2ubuntu0.3) noble-security; urgency=medium

  * SECURITY UPDATE: denial of service via stack overflow
    - debian/patches/CVE-2024-8176-pre.patch: Remove XML_DTD guards
      before is_param accesses
    - debian/patches/CVE-2024-8176-test-pre.patch: tests - Stop
      counting_start_element_handler from using g_parser
    - debian/patches/CVE-2024-8176-1.patch: Resolve the recursion during 
      entity processing to prevent stack overflow
    - debian/patches/CVE-2024-8176-2.patch: Stop updating event pointer 
      on exit for reentry
    - CVE-2024-8176

Date: 2025-03-28 11:49:12.000024+00:00
Changed-By: Vyom Yadav <vyom.yadav at canonical.com>
https://launchpad.net/ubuntu/+source/expat/2.6.1-2ubuntu0.3
-------------- next part --------------
Sorry, changesfile not available.