UbuntuUpdates.org

Package "xfpt"

Name: xfpt

Description:

generate XML from plain text
Latest version: 1.00-2ubuntu0.24.04.1
Release: noble (24.04)
Level: security
Repository: universe
Homepage: https://github.com/PhilipHazel/xfpt/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "xfpt"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "xfpt" in Noble

Repository Area Version
base universe 1.00-2
updates universe 1.00-2ubuntu0.24.04.1

Changelog

Version: 1.00-2ubuntu0.24.04.1 2025-01-09 07:07:14 UTC

  xfpt (1.00-2ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: stack-based buffer overflow vulnerability
    - debian/patches/CVE-2024-43700.patch: diagnose error if macro
      expansion makes a line too long for its buffer
    - CVE-2024-43700

 -- Shishir Subedi <email address hidden> Wed, 08 Jan 2025 11:40:40 +0545
CVE-2024-43700 xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerabi


About   -   Send Feedback to @ubuntu_updates