Summary
[2.7.1-1]
- Fix behavior change caused by fix for CVE-2024-8176
[2.7.0-1]
- Fix CVE-2024-8176
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | expat | 0:2.7.1-1.el10_0 |
| Oracle Linux · 10 | expat-devel | 0:2.7.1-1.el10_0 |
Vulnerabilities 1
-
High 7.5CVE-2024-8176 Public exploit
Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting …