Red Hat Security AdvisoryRHSA-2012:0731
expat security update
Released 2012-06-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) expat-1.95.8-11.el5_8, expat-devel-1.95.8-11.el5_8, expat-devel-1.95.8-11.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) expat-1.95.8-11.el5_8, expat-1.95.8-11.el5_8.i386, expat-1.95.8-11.el5_8.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) expat-1.95.8-11.el5_8, expat-1.95.8-11.el5_8.i386
- Red Hat Enterprise Linux Desktop (v. 6) expat-2.0.1-11.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) expat-2.0.1-11.el6_2, expat-devel-2.0.1-11.el6_2
- Red Hat Enterprise Linux HPC Node (v. 6) expat-2.0.1-11.el6_2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) expat-2.0.1-11.el6_2, expat-devel-2.0.1-11.el6_2
- Red Hat Enterprise Linux Server (v. 6) expat-2.0.1-11.el6_2, expat-2.0.1-11.el6_2.ppc, expat-devel-2.0.1-11.el6_2 +1
- Red Hat Enterprise Linux Workstation (v. 6) expat-2.0.1-11.el6_2, expat-devel-2.0.1-11.el6_2
Fixes 2 records
Priority LOW 29
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause i…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0343 · Published 2012-07-03 · Partial fix CWE-399
Priority LOW 29
The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU co…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0566 · Published 2012-07-03 · Partial fix CWE-400
