Red Hat Security Advisory

RHSA-2025:21974

mingw-expat security update

Released 2025-11-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux CRB (v. 8) mingw-expat-2.5.0-1.el8_10, mingw32-expat-2.5.0-1.el8_10, mingw64-expat-2.5.0-1.el8_10

TI-2025-36934 CVE-2025-59375 · GHSA-vjqp-pjp6-xcxx

LOW 36

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0138 Published 2025-09-15 Partial fix · 2.7.2 CWE-770