mingw-expat-2.5.0-1.el8_10

エラータID: AXSA:2025-11436:01

Release date: 
Thursday, December 4, 2025 - 09:40
Subject: 
mingw-expat-2.5.0-1.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW.

Security Fix(es):

* expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-59375
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

Solution: 

Update packages.

CVEs: 
CVE-2025-59375
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
Additional Info: 

N/A

Download: 

SRPMS
  1. mingw-expat-2.5.0-1.el8_10.src.rpm
    MD5: c9d207053395ecb82c15d23080f8cb7b
    SHA-256: 926042c16b4587d6158d7d21b9cbf458ce3148ef3386f1abb7e34e26a590ae20
    Size: 7.99 MB

Asianux Server 8 for x86_64
  1. mingw32-expat-2.5.0-1.el8_10.noarch.rpm
    MD5: adb09ef86ca71abe9d16f3f415f47098
    SHA-256: eb069b15c85031e8e6590abfa668baab7311bfe47b7936e39c802f993da89cf3
    Size: 96.81 kB
  2. mingw64-expat-2.5.0-1.el8_10.noarch.rpm
    MD5: c4d842863eae8f596108885514d885ba
    SHA-256: 5fd94b7af5b1441601afc14d7874a4fb8021bfecf3c152051e19a01db800762c
    Size: 101.97 kB