4 matches found
python3.14 security update
3.14.7-2 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 3.14.7-1 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 3.14.6-1 - Update to Python 3.14.6 Related: RHEL-227190...
CLSA-2026-1776440644 expat: Fix of 4 CVEs
CVE-2017-9233: fix external entity infinite loop in entityValueInitProcessor and entityValueProcessor - CVE-2023-52425: add reparse deferral heuristic to prevent On^2 parsing of large tokens in small buffer refills; fix buffer growth calculation - CVE-2013-0340: add billion laughs entity...
CLSA-2026-1776776980 Fix CVE(s): CVE-2023-52425
SECURITY UPDATE: quadratic re-parsing DoS with large tokens - debian/patches/CVE-2023-52425.patch: add callProcessor wrapper with reparse deferral heuristic in expat/lib/xmlparse.c, add XMLSetReparseDeferralEnabled API in expat/lib/expat.h. - CVE-2023-52425...
CLSA-2026-1776441540 expat: Fix of 4 CVEs
CVE-2017-9233: fix external entity infinite loop in entityValueInitProcessor and entityValueProcessor - CVE-2023-52425: add reparse deferral heuristic to prevent On^2 parsing of large tokens in small buffer refills; fix buffer growth calculation - CVE-2013-0340: add billion laughs entity...