RHEL 8 : expat (RHSA-2024:2575)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2575 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: parsing large tokens can trigger a denial of service CVE-2023-52425 For more...

CLSA-2024-1714065693 expat: Fix of CVE-2023-52425

CVE-2023-52425: fix reparsings for large token to prevent DoS...

thunderbird security update

115.10.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 115.10.0-2 - Update to 115.10.0 build2 115.10.0-1 - Update to 115.10.0 build1 - Revert expat CVE-2023-52425 fix...

thunderbird security update

115.10.0-2.0.1 - Add Oracle prefs 115.10.0 - Add OpenELA debranding 115.10.0-2 - Update to 115.10.0 build2 115.10.0-1 - Update to 115.10.0 build1 - Revert expat CVE-2023-52425 fix...

CVE-2023-52425 affecting package expat for versions less than 2.6.2-2

CVE-2023-52425 affecting package expat for versions less than 2.6.2-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-28757 affecting package expat for versions less than 2.6.2-2

CVE-2024-28757 affecting package expat for versions less than 2.6.2-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-52426 affecting package expat for versions less than 2.6.2-2

CVE-2023-52426 affecting package expat for versions less than 2.6.2-2. An upgraded version of the package is available that resolves this issue...

SUSE SLED15: expat / libexpat-devel / libexpat-devel-32bit / libexpat1 / etc (SUSE-SU-2024:1129-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1129-1 advisory. - CVE-2023-52425: Fixed a DoS caused by processing large tokens. bsc1219559 - CVE-2024-28757:...

openSUSE Security Advisory (SUSE-SU-2024:1162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:1129-2 Security update for expat

This update for expat fixes the following issues: - CVE-2023-52425: Fixed a DoS caused by processing large tokens. bsc1219559 - CVE-2024-28757: Fixed an XML Entity Expansion. bsc1221289...

SUSE-SU-2024:1129-1 Security update for expat

This update for expat fixes the following issues: - CVE-2023-52425: Fixed a DoS caused by processing large tokens. bsc1219559 - CVE-2024-28757: Fixed an XML Entity Expansion. bsc1221289...

Debian: Security Advisory (DLA-3783-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-3783-1 expat - security update

Bulletin has no description...

expat security update

An update is available for expat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: expat: parsing...

USN-6694-1: Expat vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that Expat could be made to consume large amounts of resources. If a user or automated system were tricked into processing specially crafted input, an attacker could possibly use this...

expat security update

2.2.5-11.0.1.1 - lib: Prevent integer overflow in doProlog CVE-2022-23990Orabug: 33910314 2.2.5-11.1 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321...

AlmaLinux 8 : expat (ALSA-2024:1615)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1615 advisory. - libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for which multiple...

Oracle Linux 8 : expat (ELSA-2024-1615)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1615 advisory. - lib: Prevent integer overflow in doProlog CVE-2022-23990Orabug: 33910314 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service Tenable...

expat: parsing large tokens can trigger a denial of service

A flaw was found in Expat libexpat. When parsing a large token that requires multiple buffer fills to complete, Expat has to re-parse the token from start numerous times. This process may trigger excessive resource consumption, leading to a denial of service...

Moderate: Red Hat Security Advisory: expat security update

An update for expat is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...