Red Hat Security AdvisoryRHSA-2016:2824
expat security update
Released 2016-11-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) expat-2.1.0-10.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) expat-devel-2.1.0-10.el7_3, expat-static-2.1.0-10.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) expat-2.1.0-10.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) expat-devel-2.1.0-10.el7_3, expat-static-2.1.0-10.el7_3
- Red Hat Enterprise Linux Desktop (v. 6) expat-2.0.1-13.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) expat-devel-2.0.1-13.el6_8
- Red Hat Enterprise Linux HPC Node (v. 6) expat-2.0.1-13.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) expat-devel-2.0.1-13.el6_8
- Red Hat Enterprise Linux Server (v. 6) expat-2.0.1-13.el6_8, expat-2.0.1-13.el6_8.ppc, expat-devel-2.0.1-13.el6_8 +1
- Red Hat Enterprise Linux Server (v. 7) expat-2.1.0-10.el7_3, expat-2.1.0-10.el7_3.ppc, expat-devel-2.1.0-10.el7_3 +1
- Red Hat Enterprise Linux Server Optional (v. 7) expat-static-2.1.0-10.el7_3, expat-static-2.1.0-10.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 6) expat-2.0.1-13.el6_8, expat-devel-2.0.1-13.el6_8
- Red Hat Enterprise Linux Workstation (v. 7) expat-2.1.0-10.el7_3, expat-devel-2.1.0-10.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 7) expat-static-2.1.0-10.el7_3
Fixes 1 record
Priority MEDIUM 63
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.13255 · Published 2016-05-26 · Partial fix CWE-119
