Red Hat Security AdvisoryRHSA-2025:21030
expat security update
Released 2025-11-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) expat-devel-2.7.1-1.el10_1.3
- Red Hat Enterprise Linux BaseOS (v. 10) expat-2.7.1-1.el10_1.3
Fixes 1 record
Priority LOW 36
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0138 · Published 2025-09-15 · Partial fix · 2.7.2 CWE-770
