Expat: Multiple vulnerabilities
Gentoo Linux Security Advisory
||GLSA 201209-06 / expat
||September 24, 2012
||September 24, 2012: 1
All supported architectures
#280615, #303727, #407519
Multiple vulnerabilities have been found in Expat, possibly
resulting in Denial of Service.
Expat is a set of XML parsing libraries.
Multiple vulnerabilities have been discovered in Expat. Please review
the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted XML
file in an application linked against Expat, possibly resulting in a
Denial of Service condition.
There is no known workaround at this time.
All Expat users should upgrade to the latest version:
Code Listing 3.1: Resolution
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/expat-2.1.0_beta3"
Packages which depend on this library may need to be recompiled. Tools
such as revdep-rebuild may assist in identifying some of these packages.