python: Missing salt initialization in _elementtree.c module

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0247

An update of 'redis', 'libmspack', 'expat' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2019-0171

Updates of 'glib', 'expat', 'oniguruma', 'libpng', 'python3', 'zeromq', 'python2', 'apache-tomcat', 'curl', 'systemd', 'unzip', 'gnupg', 'libxslt', 'libssh2' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-0247

Updates of 'libssh2', 'libmspack', 'redis', 'expat' packages of Photon OS have been released...

EulerOS 2.0 SP8 : expat (EulerOS-SA-2019-1783)

According to the version of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amou...

EulerOS 2.0 SP5 : expat (EulerOS-SA-2019-1758)

According to the version of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amou...

EulerOS 2.0 SP2 : expat (EulerOS-SA-2019-1742)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple integer overflows in the XMLGetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products,...

openSUSE Security Update : expat (openSUSE-2019-1777)

This update for expat fixes the following issues : Security issue fixed : - CVE-2018-20843: Fixed a denial of service triggered by high resource consumption in the XML parser when XML names contain a large amount of colons bsc1139937. This update was imported from the SUSE:SLE-15:Update update...

openSUSE: Security Advisory for expat (openSUSE-SU-2019:1777-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1777-1 Security update for expat

This update for expat fixes the following issues: Security issue fixed: - CVE-2018-20843: Fixed a denial of service triggered by high resource consumption in the XML parser when XML names contain a large amount of colons bsc1139937. This update was imported from the SUSE:SLE-15:Update update...

Security update for expat (moderate)

openSUSE Security Update: Security update for expat Announcement ID: openSUSE-SU-2019:1777-1 Rating: moderate References: 1139937 Cross-References: CVE-2018-20843 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This...

Fedora Update for expat FEDORA-2019-139fcda84d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: expat-2.2.7-1.fc29

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

Fedora 29 : expat (2019-139fcda84d)

This update includes a fix for a security vulnerability, CVE-2018-20843 : Fix extraction of namespace prefixes from XML names; XML names with multiple colons could end up in the wrong namespace, and take a high amount of RAM and CPU resources while processing, opening the door to use for...

SUSE SLED15 / SLES15 Security Update : expat (SUSE-SU-2019:1835-1)

This update for expat fixes the following issues : Security issue fixed : CVE-2018-20843: Fixed a denial of service triggered by high resource consumption in the XML parser when XML names contain a large amount of colons bsc1139937. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2019:1834-1)

This update for expat fixes the following issues : Security issue fixed : CVE-2018-20843: Fixed a denial of service triggered by high resource consumption in the XML parser when XML names contain a large amount of colons bsc1139937. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2019:1835-1 Security update for expat

This update for expat fixes the following issues: Security issue fixed: - CVE-2018-20843: Fixed a denial of service triggered by high resource consumption in the XML parser when XML names contain a large amount of colons bsc1139937...

SUSE-SU-2019:1834-1 Security update for expat

This update for expat fixes the following issues: Security issue fixed: - CVE-2018-20843: Fixed a denial of service triggered by high resource consumption in the XML parser when XML names contain a large amount of colons bsc1139937...

Fedora Update for expat FEDORA-2019-18868e1715

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: expat-2.2.7-1.fc30

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...