1546 matches found
OPENSUSE-SU-2026:21945-1 Security update for expat
This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service bsc1262263. - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XM...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002133)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002133 advisory. In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too fe...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002130)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002130 advisory. buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002128)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002128 advisory. lookup in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity Linux...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002131)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002131 advisory. addBinding in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...
OESA-2026-3960 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop...
OESA-2026-3958 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop...
OESA-2026-3959 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop...
OESA-2026-3957 xmlrpc-c security update
XML-RPC is a quick-and-easy way to make procedure calls over the Internet. It converts the procedure call into an XML document, sends it to a remote server using HTTP, and gets back the response as XML. Security Fixes: libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop...
Security Bulletin: IBM Tivoli Monitoring's libexpat library is affected by a security vulnerability.
Summary A vulnerable version of libexpat library which is included as part of IBM Tivoli Monitoring ITM have been remediated. Vulnerability Details CVEID:CVE-2026-41080 DESCRIPTION: libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-24842 DESCRIPTION: node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses...
Astra Linux – Vulnerabilities in expat, Firefox, Thunderbird
There is a stack overflow vulnerability in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat may be forced to recur indefinitely, exhausting the stack space and causing a crash...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat
In libexpat through version 2.4.9, there was a use-after-free issue caused by excessive destruction of a shared DTD in the XMLExternalEntityParserCreate function, especially in out-of-memory situations...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
LibExpat through version 2.5.0 causes a denial of service resource consumption because multiple reparings are required when dealing with large tokens, resulting in multiple buffer fills...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
The issue with integer overflow occurs in storeAtts in the xmlparse.c file, within the Expat library also known as libexpat, before version 2.4.3...
Astra Linux – Vulnerability in Firefox and Thunderbird
In ExPat before version 2.7.2, the libexpat library allowed attackers to trigger large dynamic memory allocations through a small document that was submitted for parsing...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
The nextScaffoldPart function in xmlparse.c of Expat also known as libexpat, prior to version 2.4.3, has an integer overflow issue...
Astra Linux – Vulnerability in expat, libxmltok
A issue was discovered in libexpat before version 2.6.3. In xmlparse.c, a negative length value for XMLParseBuffer is allowed without being rejected...