EulerOS 2.0 SP9 : expat (EulerOS-SA-2024-2807)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time.CVE-2023-52426 An issue was discovered in libexp...

EulerOS 2.0 SP10 : expat (EulerOS-SA-2024-2903)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3.nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms wher...

AlmaLinux 8 : xmlrpc-c (ALSA-2024:8859)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:8859 advisory. libexpat: Integer Overflow or Wraparound CVE-2024-45491 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note...

Oracle Linux 8 : xmlrpc-c (ELSA-2024-8859)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8859 advisory. 1.51.0-10 - Prevent integer overflow or wraparound, CVE-2024-4549 RHEL-57519 Tenable has extracted the preceding description block directly from the Oracle Linu...

Security Bulletin: AIX is affected by multiple vulnerabilities due to Python

Summary There are multiple vulnerabilities in Python used by AIX CVE-2024-45491, CVE-2024-45490, CVE-2024-45492, CVE-2024-7592, CVE-2024-8088, CVE-2024-6923. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2024-45491 DESCRIPTION: libexpat could...

AIX is affected by multiple vulnerabilities due to Python

IBM SECURITY ADVISORY First Issued: Tue Nov 5 15:21:42 CST 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/pythonadvisory13.asc Security Bulletin: AIX is affected by multiple vulnerabilities due to Python...

Moderate: Red Hat Security Advisory: xmlrpc-c security update

An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 8 : xmlrpc-c (RHSA-2024:8859)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8859 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

ALSA-2024:8859 Moderate: xmlrpc-c security update

XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...

Moderate: xmlrpc-c security update

XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...

Mageia: Security Advisory (MGASA-2024-0338)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0338 Updated mozjs78 packages fix security vulnerabilities

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. CVE-2024-45490 An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINTMAX equals SIZEMAX...

CVE-2024-45491 affecting package expat for versions less than 2.6.3-1

CVE-2024-45491 affecting package expat for versions less than 2.6.3-1. An upgraded version of the package is available that resolves this issue...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : mozjs78 (SUSE-SU-2024:3554-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3554-1 advisory. - CVE-2024-45490: Fixed negative len for XMLParseBuffer in embedded expat bnc1230036 -...

openSUSE Security Advisory (SUSE-SU-2024:3554-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3554-1 Security update for mozjs78

This update for mozjs78 fixes the following issues: - CVE-2024-45490: Fixed negative len for XMLParseBuffer in embedded expat bnc1230036 - CVE-2024-45491: Fixed integer overflow in dtdCopy in embedded expat bnc1230037 - CVE-2024-45492: Fixed integer overflow in function nextScaffoldPart in embedd...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.16 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : mozjs115 (SUSE-SU-2024:3538-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3538-1 advisory. - CVE-2024-45490: Fixed negative len for XMLParseBuffer in embedded expat bnc1230036 -...

openSUSE Security Advisory (SUSE-SU-2024:3538-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3538-1 Security update for mozjs115

This update for mozjs115 fixes the following issues: - CVE-2024-45490: Fixed negative len for XMLParseBuffer in embedded expat bnc1230036 - CVE-2024-45491: Fixed integer overflow in dtdCopy in embedded expat bnc1230037 - CVE-2024-45492: Fixed integer overflow in function nextScaffoldPart in...