(RHSA-2009:1625) Moderate: expat security update

2009-12-0700:00:00

access.redhat.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

86.2%

JSON

Expat is a C library written by James Clark for parsing XML documents.

Two buffer over-read flaws were found in the way Expat handled malformed
UTF-8 sequences when processing XML files. A specially-crafted XML file
could cause applications using Expat to crash while parsing the file.
(CVE-2009-3560, CVE-2009-3720)

All expat users should upgrade to these updated packages, which contain
backported patches to correct these issues. After installing the updated
packages, applications using the Expat library must be restarted for the
update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat4s390expat-devel< 1.95.7-4.el4_8.2expat-devel-1.95.7-4.el4_8.2.s390.rpm
RedHat5ppcexpat< 1.95.8-8.3.el5_4.2expat-1.95.8-8.3.el5_4.2.ppc.rpm
RedHat5ppc64expat< 1.95.8-8.3.el5_4.2expat-1.95.8-8.3.el5_4.2.ppc64.rpm
RedHat5ppc64expat-devel< 1.95.8-8.3.el5_4.2expat-devel-1.95.8-8.3.el5_4.2.ppc64.rpm
RedHat4ia64expat< 1.95.7-4.el4_8.2expat-1.95.7-4.el4_8.2.ia64.rpm
RedHat4x86_64expat-devel< 1.95.7-4.el4_8.2expat-devel-1.95.7-4.el4_8.2.x86_64.rpm
RedHat4ia64expat-devel< 1.95.7-4.el4_8.2expat-devel-1.95.7-4.el4_8.2.ia64.rpm
RedHat5s390xexpat-devel< 1.95.8-8.3.el5_4.2expat-devel-1.95.8-8.3.el5_4.2.s390x.rpm
RedHat5ia64expat-devel< 1.95.8-8.3.el5_4.2expat-devel-1.95.8-8.3.el5_4.2.ia64.rpm
RedHat5ia64expat< 1.95.8-8.3.el5_4.2expat-1.95.8-8.3.el5_4.2.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	s390	expat-devel	< 1.95.7-4.el4_8.2	expat-devel-1.95.7-4.el4_8.2.s390.rpm
RedHat	5	ppc	expat	< 1.95.8-8.3.el5_4.2	expat-1.95.8-8.3.el5_4.2.ppc.rpm
RedHat	5	ppc64	expat	< 1.95.8-8.3.el5_4.2	expat-1.95.8-8.3.el5_4.2.ppc64.rpm
RedHat	5	ppc64	expat-devel	< 1.95.8-8.3.el5_4.2	expat-devel-1.95.8-8.3.el5_4.2.ppc64.rpm
RedHat	4	ia64	expat	< 1.95.7-4.el4_8.2	expat-1.95.7-4.el4_8.2.ia64.rpm
RedHat	4	x86_64	expat-devel	< 1.95.7-4.el4_8.2	expat-devel-1.95.7-4.el4_8.2.x86_64.rpm
RedHat	4	ia64	expat-devel	< 1.95.7-4.el4_8.2	expat-devel-1.95.7-4.el4_8.2.ia64.rpm
RedHat	5	s390x	expat-devel	< 1.95.8-8.3.el5_4.2	expat-devel-1.95.8-8.3.el5_4.2.s390x.rpm
RedHat	5	ia64	expat-devel	< 1.95.8-8.3.el5_4.2	expat-devel-1.95.8-8.3.el5_4.2.ia64.rpm
RedHat	5	ia64	expat	< 1.95.8-8.3.el5_4.2	expat-1.95.8-8.3.el5_4.2.ia64.rpm