Anyone know about the recent security issue in eXpat?
Nick MacDonald <[email protected]> Thu, 5 Nov 2009 21:43:54 -0500
| Newsgroups | gmane.text.xml.expat.general |
|---|---|
| Message-ID | <[email protected]> |
Anyone know anything about this, and what the change is, and if there will be an update from 2.0.1 to 2.0.2 or similar? http://seclists.org/fulldisclosure/2009/Oct/344 Peter Valchev discovered an error in expat, an XML parsing C library, when parsing certain UTF-8 sequences, which can be exploited to crash an application using the library.