Moderate: xmlrpc-c security and bug fix update

2024-07-0200:00:00

errata.almalinux.org

xml-rpc

security fix

bug fix

expat

denial of service

http

rpc protocol

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

JSON

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)

OSVersionArchitecturePackageVersionFilename
almalinux8i686xmlrpc-c-c++< 1.51.0-9.el8_10xmlrpc-c-c++-1.51.0-9.el8_10.i686.rpm
almalinux8i686xmlrpc-c-devel< 1.51.0-9.el8_10xmlrpc-c-devel-1.51.0-9.el8_10.i686.rpm
almalinux8i686xmlrpc-c-client++< 1.51.0-9.el8_10xmlrpc-c-client++-1.51.0-9.el8_10.i686.rpm
almalinux8i686xmlrpc-c-client< 1.51.0-9.el8_10xmlrpc-c-client-1.51.0-9.el8_10.i686.rpm
almalinux8i686xmlrpc-c< 1.51.0-9.el8_10xmlrpc-c-1.51.0-9.el8_10.i686.rpm
almalinux8x86_64xmlrpc-c< 1.51.0-9.el8_10xmlrpc-c-1.51.0-9.el8_10.x86_64.rpm
almalinux8x86_64xmlrpc-c-client< 1.51.0-9.el8_10xmlrpc-c-client-1.51.0-9.el8_10.x86_64.rpm
almalinux8x86_64xmlrpc-c-c++< 1.51.0-9.el8_10xmlrpc-c-c++-1.51.0-9.el8_10.x86_64.rpm
almalinux8x86_64xmlrpc-c-devel< 1.51.0-9.el8_10xmlrpc-c-devel-1.51.0-9.el8_10.x86_64.rpm
almalinux8x86_64xmlrpc-c-client++< 1.51.0-9.el8_10xmlrpc-c-client++-1.51.0-9.el8_10.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	i686	xmlrpc-c-c++	< 1.51.0-9.el8_10	xmlrpc-c-c++-1.51.0-9.el8_10.i686.rpm
almalinux	8	i686	xmlrpc-c-devel	< 1.51.0-9.el8_10	xmlrpc-c-devel-1.51.0-9.el8_10.i686.rpm
almalinux	8	i686	xmlrpc-c-client++	< 1.51.0-9.el8_10	xmlrpc-c-client++-1.51.0-9.el8_10.i686.rpm
almalinux	8	i686	xmlrpc-c-client	< 1.51.0-9.el8_10	xmlrpc-c-client-1.51.0-9.el8_10.i686.rpm
almalinux	8	i686	xmlrpc-c	< 1.51.0-9.el8_10	xmlrpc-c-1.51.0-9.el8_10.i686.rpm
almalinux	8	x86_64	xmlrpc-c	< 1.51.0-9.el8_10	xmlrpc-c-1.51.0-9.el8_10.x86_64.rpm
almalinux	8	x86_64	xmlrpc-c-client	< 1.51.0-9.el8_10	xmlrpc-c-client-1.51.0-9.el8_10.x86_64.rpm
almalinux	8	x86_64	xmlrpc-c-c++	< 1.51.0-9.el8_10	xmlrpc-c-c++-1.51.0-9.el8_10.x86_64.rpm
almalinux	8	x86_64	xmlrpc-c-devel	< 1.51.0-9.el8_10	xmlrpc-c-devel-1.51.0-9.el8_10.x86_64.rpm
almalinux	8	x86_64	xmlrpc-c-client++	< 1.51.0-9.el8_10	xmlrpc-c-client++-1.51.0-9.el8_10.x86_64.rpm