SUSE-SU-2025:03508-1

Опубликовано: 09 окт. 2025

Источник: suse-cvrf

Описание

Security update for expat

This update for expat fixes the following issues:

CVE-2025-59375: memory amplification vulnerability allows attackers to trigger excessive dynamic memory allocations by submitting crafted XML input (bsc#1249584).

expat-2.7.1-150700.3.6.1

libexpat-devel-2.7.1-150700.3.6.1

libexpat1-2.7.1-150700.3.6.1

libexpat1-32bit-2.7.1-150700.3.6.1

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

SUSE Linux Enterprise Module for Basesystem 15 SP7:expat-2.7.1-150700.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP7:libexpat-devel-2.7.1-150700.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP7:libexpat1-2.7.1-150700.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP7:libexpat1-32bit-2.7.1-150700.3.6.1