Red Hat Security AdvisoryRHSA-2009:1625
expat security update
Released 2009-12-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 expat-1.95.5-6.2, expat-1.95.5-6.2.i386, expat-devel-1.95.5-6.2 +1
- Red Hat Enterprise Linux (v. 5 server) expat-1.95.8-8.3.el5_4.2, expat-1.95.8-8.3.el5_4.2.i386, expat-1.95.8-8.3.el5_4.2.ia64 +5
- Red Hat Enterprise Linux AS version 3 expat-1.95.5-6.2, expat-1.95.5-6.2.i386, expat-1.95.5-6.2.ia64 +5
- Red Hat Enterprise Linux AS version 4 expat-1.95.7-4.el4_8.2, expat-1.95.7-4.el4_8.2.i386, expat-1.95.7-4.el4_8.2.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) expat-1.95.8-8.3.el5_4.2, expat-1.95.8-8.3.el5_4.2.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) expat-1.95.8-8.3.el5_4.2, expat-devel-1.95.8-8.3.el5_4.2, expat-devel-1.95.8-8.3.el5_4.2.i386
- Red Hat Enterprise Linux Desktop version 4 expat-1.95.7-4.el4_8.2, expat-1.95.7-4.el4_8.2.i386, expat-devel-1.95.7-4.el4_8.2 +1
- Red Hat Enterprise Linux ES version 3 expat-1.95.5-6.2, expat-1.95.5-6.2.i386, expat-1.95.5-6.2.ia64 +3
- Red Hat Enterprise Linux ES version 4 expat-1.95.7-4.el4_8.2, expat-1.95.7-4.el4_8.2.i386, expat-1.95.7-4.el4_8.2.ia64 +3
- Red Hat Enterprise Linux WS version 3 expat-1.95.5-6.2, expat-1.95.5-6.2.i386, expat-1.95.5-6.2.ia64 +3
- Red Hat Enterprise Linux WS version 4 expat-1.95.7-4.el4_8.2, expat-1.95.7-4.el4_8.2.i386, expat-1.95.7-4.el4_8.2.ia64 +3
Fixes 2 records
Priority MEDIUM 45
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) v…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.27924 · Published 2009-11-03 · Fixed
Priority MEDIUM 44
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with m…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.24313 · Published 2009-12-04 · Partial fix CWE-119
