[ubuntu/oracular-security] expat 2.6.2-2ubuntu0.2 (Accepted)

[Vyom Yadav]

expat (2.6.2-2ubuntu0.2) oracular-security; urgency=medium

  * SECURITY UPDATE: denial of service via stack overflow
    - debian/patches/CVE-2024-8176-pre.patch: Remove XML_DTD guards
      before is_param accesses
    - debian/patches/CVE-2024-8176-test-pre.patch: tests - Stop
      counting_start_element_handler from using g_parser
    - debian/patches/CVE-2024-8176-1.patch: Resolve the recursion during 
      entity processing to prevent stack overflow
    - debian/patches/CVE-2024-8176-2.patch: Stop updating event pointer 
      on exit for reentry
    - CVE-2024-8176

Date: 2025-03-28 12:04:25.484467+00:00
Changed-By: Vyom Yadav <vyom.yadav at canonical.com>
https://launchpad.net/ubuntu/+source/expat/2.6.2-2ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.