Severity: Moderate Affected versions:
- Apache OpenOffice through 4.1.15 Description: In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations. References: https://openoffice.apache.org/ https://www.cve.org/CVERecord?id=CVE-2022-43680 -- Arrigo --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@openoffice.apache.org For additional commands, e-mail: users-h...@openoffice.apache.org