Red Hat Security AdvisoryRHSA-2025:4448
xmlrpc-c security update
Released 2025-05-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) xmlrpc-c-1.51.0-5.el8_4.2, xmlrpc-c-client-1.51.0-5.el8_4.2
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) xmlrpc-c-1.51.0-5.el8_4.2, xmlrpc-c-client-1.51.0-5.el8_4.2
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) xmlrpc-c-1.51.0-5.el8_4.2, xmlrpc-c-client-1.51.0-5.el8_4.2
Fixes 1 record
Priority HIGH 72
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01353 · Published 2025-03-14 · Partial fix · 2.7.0, 2.7.1-1.el10_0 +18 CWE-674
