ELSA-2025-21974 — Important: mingw-expat security update (Oracle Linux 8)

Summary

[2.5.0-1]
- Rebase to version 2.5.0
- Fix the following CVEs
CVE-2023-52425 CVE-2024-28757 CVE-2024-45490
CVE-2024-45491 CVE-2024-45492 CVE-2024-50602
CVE-2024-8176 CVE-2025-59375
- Resolves: RHEL-114628

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	mingw32-expat	0:2.5.0-1.el8_10
Oracle Linux · 8	mingw64-expat	0:2.5.0-1.el8_10

Vulnerabilities 1

High 7.5

CVE-2025-59375

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that i…

libexpat project libexpat thunderbird firefox-esr Debian Ubuntu Azure Linux Alpine Wolfi

Sep 15, 2025

Important: mingw-expat security update (Oracle Linux 8)

Summary

Fixed packages 2

Vulnerabilities 1

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that i…