RHSA-2024:1530: Moderate: expat security update
Published Mar 26, 2024
·Updated
Expat is a C library for parsing XML documents.Security Fix(es): expat: parsing large tokens can trigger a denial of service (CVE-2023-52425) expat: XML Entity Expansion (CVE-2024-28757)
Affected Software
20 affected componentsFixes available
redhat/expat<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat-debuginfo<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat-debuginfo<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat-debugsource<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat-debugsource<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat-devel<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat-devel<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat-debuginfo<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat-debugsource<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat-devel<2.5.0-1.el9_3.1
2.5.0-1.el9_3.1
redhat/expat<2.5.0-1.el9_3.1.aa
2.5.0-1.el9_3.1.aa
redhat/expat-debuginfo<2.5.0-1.el9_3.1.aa
2.5.0-1.el9_3.1.aa
redhat/expat-debugsource<2.5.0-1.el9_3.1.aa
2.5.0-1.el9_3.1.aa
redhat/expat-devel<2.5.0-1.el9_3.1.aa
2.5.0-1.el9_3.1.aa
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux for ARM 64
Remediation
Event History
Mar 26, 2024
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·04:30 PM
Frequently Asked Questions
1
What are the main vulnerabilities addressed in RHSA-2024:1530?
RHSA-2024:1530 addresses a denial of service vulnerability due to parsing large tokens (CVE-2023-52425) and an XML Entity Expansion vulnerability (CVE-2024-28757).
2
What is the severity rating of RHSA-2024:1530?
The severity rating of RHSA-2024:1530 is moderate.
3
How do I fix RHSA-2024:1530?
To fix RHSA-2024:1530, update the expat package to version 2.5.0-1.el9_3.1 or later.
4
Which systems are affected by RHSA-2024:1530?
RHSA-2024:1530 affects multiple versions of Red Hat Enterprise Linux across different architectures including x86_64, IBM z Systems, Power, and ARM 64.
5
What components of the expat library are impacted by RHSA-2024:1530?
The vulnerabilities in RHSA-2024:1530 impact the expat library's XML parsing functionality.