expat-2.2.5-16.el8_10

エラータID: AXSA:2024-9009:08

Release date: 
Thursday, November 14, 2024 - 22:28
Subject: 
expat-2.2.5-16.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

Expat is a C library for parsing XML documents.

Security Fix(es):

* libexpat: expat: DoS via XML_ResumeParser (CVE-2024-50602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-50602
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Solution: 

Update packages.

CVEs: 
CVE-2024-50602
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.
Additional Info: 

N/A

Download: 

SRPMS
  1. expat-2.2.5-16.el8_10.src.rpm
    MD5: 903bcdc4a644eee02b57d2d099fa6cb5
    SHA-256: 90518ffc74c2536206804f489bbce6f7816b008e21b3b7da5c3a16a47f1a5864
    Size: 7.95 MB

Asianux Server 8 for x86_64
  1. expat-2.2.5-16.el8_10.i686.rpm
    MD5: 0f43c6d69f6cbbee978ae201a799a2cb
    SHA-256: fe75ac744d1082d7614abee70398f47c0c36ba5657da25bc761a501860602870
    Size: 113.36 kB
  2. expat-2.2.5-16.el8_10.x86_64.rpm
    MD5: 86ddcca6c212414170ba411024ab1439
    SHA-256: 4a6b9e90295d74a9d58e16fb0d23718456c4b6157f7536c667b0c3b784f16d79
    Size: 113.45 kB
  3. expat-devel-2.2.5-16.el8_10.i686.rpm
    MD5: 5b3b1138275de421d5a47e89dcc2f714
    SHA-256: 369d8a3766f5bdff20e9e2aefe2bd2ea8ff5fec5de678c1f70ef1f98241fa2c7
    Size: 57.29 kB
  4. expat-devel-2.2.5-16.el8_10.x86_64.rpm
    MD5: 9eae5095bcf7aad7e7e5842289e9b034
    SHA-256: 2d157d8963305b72ac3f26972459774307b2b0a1d561cad8ed471f39658c0fbd
    Size: 57.27 kB