[<prev] [next>] [day] [month] [year] [list]
Message-ID: <88785c14-8198-8f86-6a0f-33daf51dfb30@apache.org>
Date: Thu, 07 Oct 2021 15:20:29 +0000
From: Dave Fisher <wave@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2021-40439: Apache OpenOffice: Billion Laughs
Severity: medium
Description:
Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files.
All versions of Apache OpenOffice up to 4.1.10 are subject to this issue.
expat in version 4.1.11 is patched.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
