RHEL 6 / 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 (RHSA-2020:2644)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2644 advisory. This release adds the new Apache HTTP Server 2.4.37 Service Pack 3 packages that are part of the JBoss Core Services offering. This...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0301

An update of 'systemd', 'openssh', 'expat', 'perl', 'elasticsearch', 'kibana' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2020-0254

Updates of 'linux-aws', 'expat', 'linux-secure', 'nghttp2', 'perl', 'linux-esx', 'linux', 'libjpeg-turbo' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0254

An update of 'expat', 'libjpeg-turbo', 'perl', 'nghttp2' packages of Photon OS has been released...

Photon OS 1.0: Expat PHSA-2020-1.0-0301

An update of the expat package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0301. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137638...

RHEL 7 : expat (RHSA-2020:2508)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2508 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: Integer overflow leading to buffer overflow in XMLGetBuffer CVE-2015-2716 For...

EulerOS 2.0 SP2 : apr-util (EulerOS-SA-2020-1639)

According to the version of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of...

EulerOS 2.0 SP2 : xulrunner (EulerOS-SA-2020-1619)

According to the versions of the xulrunner package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Expat, when used in a parser that has not called XMLSetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers to...

Huawei EulerOS: Security Advisory for xulrunner (EulerOS-SA-2020-1619)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2020-1639)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: expat security update

An update for expat is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Security Bulletin: IBM Prospect is affected by Expat XML Parser vulnerability (CVE-2019-15903)

Summary Prospect Server is affected by Expat XML parsing vulnarability CVE-2019-15903 which may result in a heap-based buffer over-read. Vulnerability Details CVEID: CVE-2019-15903 DESCRIPTION: In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to...

Security fix for the ALT Linux 9 package expat version 2.2.9-alt1

May 31, 2020 Vladimir D. Seleznev 2.2.9-alt1 - 2.2.4 - 2.2.9 fixes CVE-2018-20843 and CVE-2019-15903 - Fixed license field according with SPDX...

Amazon Linux AMI : expat (ALAS-2020-1364)

The version of expat installed on the remote host is prior to 2.1.0-11.22. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1364 advisory. Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows...

Ubuntu 16.04 LTS : Thunderbird vulnerabilities (USN-4335-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4335-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an...

USN-4335-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, bypass same-origin...

USN-4335-1 thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, bypass same-origin...

Scientific Linux Security Update : expat on SL7.x x86_64 (20200407)

expat: Integer overflow leading to buffer overflow in XMLGetBuffer C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135808; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2020-1445)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

python: Missing salt initialization in _elementtree.c module

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming...