Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:21776

Опубликовано: 20 нояб. 2025
Источник: rocky
Оценка: Important

Описание

Important: expat security update

Expat is a C library for parsing XML documents.

Security Fix(es):

  • expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
expati6861.el8_10expat-2.5.0-1.el8_10.i686.rpm
expatx86_641.el8_10expat-2.5.0-1.el8_10.x86_64.rpm
expat-develi6861.el8_10expat-devel-2.5.0-1.el8_10.i686.rpm
expat-develx86_641.el8_10expat-devel-2.5.0-1.el8_10.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS3: 7.5
redhat
4 месяца назад

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS3: 7.5
nvd
4 месяца назад

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS3: 7.5
msrc
4 месяца назад

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS3: 7.5
debian
4 месяца назад

libexpat in Expat before 2.7.2 allows attackers to trigger large dynam ...