High ELSA-2022-1643 1 CVE

Important: xmlrpc-c security update (Oracle Linux 8)

Published May 2, 2022 · Updated May 2, 2022

Ecosystem: Oracle Linux

Summary

[1.51.0-5.1]
- Add missing validation of encoding (CVE-2022-25235) (#2058114)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	xmlrpc-c	0:1.51.0-5.el8_5.1
Oracle Linux · 8	xmlrpc-c-c++	0:1.51.0-5.el8_5.1
Oracle Linux · 8	xmlrpc-c-client	0:1.51.0-5.el8_5.1
Oracle Linux · 8	xmlrpc-c-client++	0:1.51.0-5.el8_5.1
Oracle Linux · 8	xmlrpc-c-devel	0:1.51.0-5.el8_5.1

Vulnerabilities 1

Critical 9.8

CVE-2022-25235 Public exploit

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine

Feb 16, 2022