Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | expat-debuginfo | 0:2.5.0-3.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | expat-debugsource | 0:2.5.0-3.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | expat-devel | 0:2.5.0-3.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | expat | 0:2.5.0-3.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | expat-debuginfo | 0:2.5.0-3.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::baseos | expat-debugsource | 0:2.5.0-3.el9_5.3 |
Vulnerabilities 1
-
High 7.5CVE-2024-8176 Public exploit
Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting …
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2310137
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3531.json
-
report
https://access.redhat.com/security/cve/CVE-2024-8176
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-8176
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-8176
-
article
https://github.com/libexpat/libexpat/issues/893
-
article
https://github.com/libexpat/libexpat/pull/973