Описание
ELSA-2024-1530: expat security update (MODERATE)
[2.5.0-1.1]
- CVE-2023-52425: Fix parsing of large tokens
- CVE-2024-28757: Reject direct parameter entity recursion
- Resolves: RHEL-29698
- Resolves: RHEL-29695
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
expat
2.5.0-1.el9_3.1
expat-devel
2.5.0-1.el9_3.1
Oracle Linux x86_64
expat
2.5.0-1.el9_3.1
expat-devel
2.5.0-1.el9_3.1
Связанные CVE
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 1 года назад
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
CVSS3: 7.5
redhat
больше 1 года назад
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
CVSS3: 7.5
nvd
больше 1 года назад
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
