Public bug reported:
Please sync expat 2.4.1-1 (main) from Debian experimental (main)
Changelog entries since current impish version 2.3.0-1:
expat (2.4.1-1) experimental; urgency=high
* New upstream release:
- fix CVE-2013-0340: protect against billion laughs attacks
(denial-of-service; flavors targeting CPU time or RAM or both,
leveraging general entities or parameter entities or both).
* Update libexpat1 symbols.
-- Laszlo Boszormenyi (GCS) <g...@debian.org> Mon, 24 May 2021 10:14:11
+0200
** Affects: expat (Ubuntu)
Importance: Wishlist
Status: New
** Changed in: expat (Ubuntu)
Importance: Undecided => Wishlist
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1943133
Title:
Sync expat 2.4.1-1 (main) from Debian experimental (main)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/expat/+bug/1943133/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
