Red Hat Security Advisory

RHSA-2025:4447

xmlrpc-c security update

Released 2025-05-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v. 8.2) xmlrpc-c-1.51.0-5.el8_2.2, xmlrpc-c-client-1.51.0-5.el8_2.2

TI-2024-07583 CVE-2024-8176 · GHSA-9hcv-xw76-m4h6

HIGH 72

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01353 Published 2025-03-14 Partial fix · 2.7.0, 2.7.1-1.el10_0 +18 CWE-674