Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::baseos | xmlrpc-c | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::baseos | xmlrpc-c-apps-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::baseos | xmlrpc-c-c++-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::baseos | xmlrpc-c-client | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::baseos | xmlrpc-c-client-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::baseos | xmlrpc-c-client++-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::baseos | xmlrpc-c-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::baseos | xmlrpc-c-debugsource | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::crb | xmlrpc-c-apps-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::crb | xmlrpc-c-c++ | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::crb | xmlrpc-c-c++-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::crb | xmlrpc-c-client-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::crb | xmlrpc-c-client++ | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::crb | xmlrpc-c-client++-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::crb | xmlrpc-c-debuginfo | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::crb | xmlrpc-c-debugsource | 0:1.51.0-5.el8_2.1 |
| Red Hat · RHEL 8.2 EUS rhel_eus:8.2::crb | xmlrpc-c-devel | 0:1.51.0-5.el8_2.1 |
Vulnerabilities 1
-
Critical 9.8CVE-2022-25235 Public exploit
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2056366
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1540.json
-
report
https://access.redhat.com/security/cve/CVE-2022-25235
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-25235
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-25235
-
article
https://blog.hartwork.org/posts/expat-2-4-5-released/