Security update for expat

🗓️ 03 Feb 2025 08:54:50Reported by SuseType

Expat security update fixes overflows in nextScaffoldPart and dtdCopy, rejects negative xml parse buffer length, and stops entity expansion.

Reporter	Title	Published	Views	Family All 641
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server	7 Aug 202515:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libexpat affects IBM Cloud Pak System[CVE-2024-45490]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	8 Aug 202509:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	4 Dec 202410:17	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Outside In Technology (OIT) security vulnerabilities in FileNet Content Manager (FNCM) Content Based Retrieval (CBR) content indexing	9 Jul 202515:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	7 May 202417:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Open Source affect Cloud Pak System	28 Oct 202417:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libexpat affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	12 Mar 202517:39	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is affected by information disclosure due to Python (CVE-2024-28757)	13 Jun 202422:04	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
suse	6.0	aarch64	expat-debugsource	2.5.0	expat-debugsource-2.5.0-3.1.aarch64.rpm
suse	6.0	aarch64	libexpat1	2.5.0	libexpat1-2.5.0-3.1.aarch64.rpm
suse	6.0	aarch64	libexpat1-debuginfo	2.5.0	libexpat1-debuginfo-2.5.0-3.1.aarch64.rpm
suse	6.0	s390x	expat-debugsource	2.5.0	expat-debugsource-2.5.0-3.1.s390x.rpm
suse	6.0	s390x	libexpat1	2.5.0	libexpat1-2.5.0-3.1.s390x.rpm
suse	6.0	s390x	libexpat1-debuginfo	2.5.0	libexpat1-debuginfo-2.5.0-3.1.s390x.rpm
suse	6.0	x86_64	expat-debugsource	2.5.0	expat-debugsource-2.5.0-3.1.x86_64.rpm
suse	6.0	x86_64	libexpat1	2.5.0	libexpat1-2.5.0-3.1.x86_64.rpm
suse	6.0	x86_64	libexpat1-debuginfo	2.5.0	libexpat1-debuginfo-2.5.0-3.1.x86_64.rpm

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
suse	www.suse.com/security/cve/CVE-2024-28757.html
suse	www.suse.com/security/cve/CVE-2024-45490.html
suse	www.suse.com/security/cve/CVE-2024-45491.html
suse	www.suse.com/security/cve/CVE-2024-45492.html
suse	www.suse.com/security/cve/CVE-2024-28757.html
suse	www.suse.com/security/cve/CVE-2024-45490.html

03 Feb 2025 08:54Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

CVSS 46.9

EPSS0.02006