[ MDVSA-2009:211-1 ] expat

[dude67]

_______________________________________________________________________

Package : expat
Date : December 4, 2009
Affected: 2008.0
_______________________________________________________________________

Problem Description:

A vulnerability was found in xmltok_impl.c (expat) that with
specially crafted XML could be exploited and lead to a denial of
service attack. Related to CVE-2009-2625 (CVE-2009-3720).

This update fixes this vulnerability.

Update:

Packages for 2008.0 are being provided due to extended support for
Corporate products.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-3720
https://bugs.gentoo.org/show_bug.cgi?id=280615
_______________________________________________________________________