Advisory Published

RHSA-2009:1625: Moderate: expat security update

First published: Mon Dec 07 2009(Updated: )

Expat is a C library written by James Clark for parsing XML documents.<br>Two buffer over-read flaws were found in the way Expat handled malformed<br>UTF-8 sequences when processing XML files. A specially-crafted XML file<br>could cause applications using Expat to crash while parsing the file.<br>(CVE-2009-3560, CVE-2009-3720)<br>All expat users should upgrade to these updated packages, which contain<br>backported patches to correct these issues. After installing the updated<br>packages, applications using the Expat library must be restarted for the<br>update to take effect.

Affected SoftwareAffected VersionHow to fix
redhat/expat<1.95.8-8.3.el5_4.2
1.95.8-8.3.el5_4.2
redhat/expat<1.95.8-8.3.el5_4.2
1.95.8-8.3.el5_4.2
redhat/expat-devel<1.95.8-8.3.el5_4.2
1.95.8-8.3.el5_4.2
redhat/expat-devel<1.95.8-8.3.el5_4.2
1.95.8-8.3.el5_4.2
redhat/expat<1.95.7-4.el4_8.2
1.95.7-4.el4_8.2
redhat/expat<1.95.7-4.el4_8.2
1.95.7-4.el4_8.2
redhat/expat-devel<1.95.7-4.el4_8.2
1.95.7-4.el4_8.2
redhat/expat-devel<1.95.7-4.el4_8.2
1.95.7-4.el4_8.2

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of RHSA-2009:1625?

    The severity of RHSA-2009:1625 is categorized as moderate.

  • How do I fix RHSA-2009:1625?

    To fix RHSA-2009:1625, update the expat package to version 1.95.8-8.3.el5_4.2 or higher.

  • What is the impact of RHSA-2009:1625?

    The impact of RHSA-2009:1625 includes potential application crashes when processing specially-crafted XML files.

  • Which software versions are affected by RHSA-2009:1625?

    RHSA-2009:1625 affects specific versions of the expat and expat-devel packages including versions prior to 1.95.8-8.3.el5_4.2.

  • Is there a known exploit for RHSA-2009:1625?

    There are no public exploits explicitly documented for RHSA-2009:1625, but it exposes systems to potential denial of service.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203