UbuntuUpdates.org

Package "tinyxml"

Name: tinyxml

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • TinyXml library - header and static library
  • TinyXml library - documentation files
  • C++ XML parsing library
Latest version: 2.6.2-6ubuntu0.22.04.1
Release: jammy (22.04)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "tinyxml" in Jammy

Repository Area Version
base universe 2.6.2-6
updates universe 2.6.2-6ubuntu0.22.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.6.2-6ubuntu0.22.04.1 2024-01-30 10:08:06 UTC

  tinyxml (2.6.2-6ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2023-34194.patch: Avoid reachable assertion
      via crafted XML document with a '\0' located after whitespace
    - CVE-2023-34194

 -- Giampaolo Fresi Roglia <email address hidden> Mon, 29 Jan 2024 13:15:38 +0100
CVE-2023-34194 StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted X


About   -   Send Feedback to @ubuntu_updates