RHSA-2024:3926: Moderate: expat security update
Expat is a C library for parsing XML documents.Security Fix(es): expat: parsing large tokens can trigger a denial of service (CVE-2023-52425) expat: XML Entity Expansion (CVE-2024-28757) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:3926?
The severity of RHSA-2024:3926 is classified as high due to the potential for denial of service attacks.
How do I fix RHSA-2024:3926?
To fix RHSA-2024:3926, update to the recommended version 2.5.0-1.el9_2.1 of the expat package.
What vulnerabilities does RHSA-2024:3926 address?
RHSA-2024:3926 addresses CVE-2023-52425 and CVE-2024-28757, which can lead to denial of service through XML parsing issues.
Which systems are affected by RHSA-2024:3926?
RHSA-2024:3926 affects various versions of Red Hat Enterprise Linux, including Power, ARM 64, IBM z Systems, and x86_64.
When was RHSA-2024:3926 released?
RHSA-2024:3926 was released in response to identified vulnerabilities in the expat library.