MGASA-2024-0072

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2024-0072.html

Import Source

https://advisories.mageia.org/MGASA-2024-0072.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2024-0072

Related

Published

2024-03-18T16:12:23Z

Modified

2024-03-18T15:59:44Z

Summary

Updated expat packages fix security vulnerabilities

Details

It was discovered that Expat could be made to consume large amounts of resources. If a user or automated system were tricked into processing specially crafted input, an attacker could possibly use this issue to cause a denial of service. (CVE-2023-52425, CVE-2024-28757)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:9 / expat

Package

Name: expat
Purl: pkg:rpm/mageia/expat?distro=mageia-9

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.2-1.mga9

Ecosystem specific

{
    "section": "core"
}