UbuntuUpdates.org

Package "libtinyxml-dev"

Name: libtinyxml-dev

Description:

TinyXml library - header and static library

Latest version: 2.6.2-6ubuntu0.22.04.1
Release: jammy (22.04)
Level: updates
Repository: universe
Head package: tinyxml
Homepage: http://www.grinninglizard.com/tinyxml/

Links


Download "libtinyxml-dev"


Other versions of "libtinyxml-dev" in Jammy

Repository Area Version
base universe 2.6.2-6
security universe 2.6.2-6ubuntu0.22.04.1

Changelog

Version: 2.6.2-6ubuntu0.22.04.1 2024-01-30 12:08:10 UTC

  tinyxml (2.6.2-6ubuntu0.22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2023-34194.patch: Avoid reachable assertion
      via crafted XML document with a '\0' located after whitespace
    - CVE-2023-34194

 -- Giampaolo Fresi Roglia <email address hidden> Mon, 29 Jan 2024 13:15:38 +0100

CVE-2023-34194 StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted X



About   -   Send Feedback to @ubuntu_updates