Red Hat Security AdvisoryRHSA-2010:0002
PyXML security update
Released 2010-01-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) PyXML-0.8.4-4.el5_4.2, PyXML-0.8.4-4.el5_4.2.i386, PyXML-0.8.4-4.el5_4.2.ia64 +1
- Red Hat Enterprise Linux AS version 4 PyXML-0.8.3-6.el4_8.2, PyXML-0.8.3-6.el4_8.2.i386, PyXML-0.8.3-6.el4_8.2.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) PyXML-0.8.4-4.el5_4.2, PyXML-0.8.4-4.el5_4.2.i386
- Red Hat Enterprise Linux Desktop version 4 PyXML-0.8.3-6.el4_8.2, PyXML-0.8.3-6.el4_8.2.i386
- Red Hat Enterprise Linux ES version 4 PyXML-0.8.3-6.el4_8.2, PyXML-0.8.3-6.el4_8.2.i386, PyXML-0.8.3-6.el4_8.2.ia64
- Red Hat Enterprise Linux WS version 4 PyXML-0.8.3-6.el4_8.2, PyXML-0.8.3-6.el4_8.2.i386, PyXML-0.8.3-6.el4_8.2.ia64
Fixes 1 record
Priority MEDIUM 45
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) v…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.27924 · Published 2009-11-03 · Fixed