Red Hat Security AdvisoryRHSA-2020:3952
expat security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) expat-2.1.0-12.el7
- Red Hat Enterprise Linux Client Optional (v. 7) expat-devel-2.1.0-12.el7, expat-static-2.1.0-12.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) expat-2.1.0-12.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) expat-devel-2.1.0-12.el7, expat-static-2.1.0-12.el7
- Red Hat Enterprise Linux Server (v. 7) expat-2.1.0-12.el7, expat-2.1.0-12.el7.ppc, expat-devel-2.1.0-12.el7 +1
- Red Hat Enterprise Linux Server Optional (v. 7) expat-static-2.1.0-12.el7, expat-static-2.1.0-12.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) expat-2.1.0-12.el7, expat-devel-2.1.0-12.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) expat-static-2.1.0-12.el7
Fixes 2 records
Priority MEDIUM 49
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for de…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07107 · Published 2019-06-24 · Partial fix CWE-611
Priority MEDIUM 42
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06643 · Published 2019-09-04 · Partial fix CWE-125
