[slackware-security] expat

New expat packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/expat-2.4.5-i586-1slack15.0.txz: Upgraded. Fixed security issues that could lead to denial of service or potentially...

AZL-8604 CVE-2022-25236 affecting package expat for versions less than 2.4.8-1

xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...

ALPINE-CVE-2022-25236

xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...

CVE-2022-25236

xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...

CVE-2022-25236

CVE-2022-25236 (Expat/libexpat) affects Expat before 2.4.5, where attackers can insert namespace-separator characters into namespace URIs in xmlparse.c. The issue can enable attacker-controlled input to trigger a denial of service or, in certain contexts (e.g., misuse of xmlns[:prefix] attribute ...

CVE-2022-25236

xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...

CVE-2022-25236

xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...

CVE-2022-25236

xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs...

CVE-2020-25236

creationtimestamp| type| source ---|---|--- 2021-03-15 19:29:10+00:00| seen| https://t.me/cibsecurity/24908...

CVE-2020-25236

Siemens LOGO! 8 family (including SIPLUS variants) is affected by CVE-2020-25236. The vulnerability stems from improper handling of exceptional conditions in the control logic (CL) that LOGO! 8 executes. An attacker with local access could manipulate CL, causing the device to crash and requiring ...

Siemens LOGO! 8 BM

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2021-25236

creationtimestamp| type| source ---|---|--- 2021-02-04 22:34:42+00:00| seen| https://t.me/cibsecurity/23132...

CVE-2021-25236

CVE-2021-25236 describes a server-side request forgery (SSRF) information disclosure affecting Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1. According to connected sources, unauthenticated attackers can locate online agents via a specific sweep, with exploitation tied t...

jobindex.dk Open Redirect vulnerability

Vulnerable URL: http://www.jobindex.dk/cgi/click.cgi?jobid=417026=h=r=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 28.09.2016 Latest check for patch:| 28.09.2016 07:00 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...