Medium ELSA-2024-4259 1 CVE

Moderate: xmlrpc-c security and bug fix update (Oracle Linux 8)

Published Jul 2, 2024 · Updated Jul 2, 2024

Ecosystem: Oracle Linux

Summary

[1.51.0-9]
- Address segfault found in CVE-2023-52425 (RHEL-24226)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	xmlrpc-c	0:1.51.0-9.el8_10
Oracle Linux · 8	xmlrpc-c-c++	0:1.51.0-9.el8_10
Oracle Linux · 8	xmlrpc-c-client	0:1.51.0-9.el8_10
Oracle Linux · 8	xmlrpc-c-client++	0:1.51.0-9.el8_10
Oracle Linux · 8	xmlrpc-c-devel	0:1.51.0-9.el8_10

Vulnerabilities 1

High 7.5

CVE-2023-52425

libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in t…

insighttoolkit4 expat swish-e matanza Debian Ubuntu Azure Linux Alpine

Feb 4, 2024