Medium ELSA-2024-8859 1 CVE

Moderate: xmlrpc-c security update (Oracle Linux 8)

Published Nov 5, 2024 · Updated Nov 5, 2024

Ecosystem: Oracle Linux

Summary

[1.51.0-10]
- Prevent integer overflow or wraparound, CVE-2024-4549 (RHEL-57519)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	xmlrpc-c	0:1.51.0-10.el8_10
Oracle Linux · 8	xmlrpc-c-c++	0:1.51.0-10.el8_10
Oracle Linux · 8	xmlrpc-c-client	0:1.51.0-10.el8_10
Oracle Linux · 8	xmlrpc-c-client++	0:1.51.0-10.el8_10
Oracle Linux · 8	xmlrpc-c-devel	0:1.51.0-10.el8_10

Vulnerabilities 1

High 7.3

CVE-2024-45491

An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts o…

qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi

Aug 30, 2024