Red Hat Security AdvisoryRHSA-2022:1540
xmlrpc-c security update
Released 2022-04-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v. 8.2) xmlrpc-c-c++-1.51.0-5.el8_2.1, xmlrpc-c-client++-1.51.0-5.el8_2.1, xmlrpc-c-devel-1.51.0-5.el8_2.1
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) xmlrpc-c-1.51.0-5.el8_2.1, xmlrpc-c-client-1.51.0-5.el8_2.1
Fixes 1 record
Priority MEDIUM 57
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04955 · Published 2022-02-16 · Partial fix CWE-116
