Red Hat Security Advisory

RHSA-2022:1539

xmlrpc-c security update

Released 2022-04-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v. 8.1) xmlrpc-c-1.51.0-5.el8_1.1, xmlrpc-c-client-1.51.0-5.el8_1.1

Fixes 1 record

TI-2022-08946 CVE-2022-25235 · GHSA-8mw4-grgw-m3fp

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding…

MEDIUM 57

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04955 Published 2022-02-16 Partial fix CWE-116