A vulnerability has been found in Expat which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/expat | * | < 2.5.0 | >= 2.5.0 |
Expat is a set of XML parsing libraries.
In certain out-of-memory situations, Expat may free memory before it should, leading to a use-after-free.
A use-after-free can result in denial of service.
There is no known workaround at this time.
All Expat users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/expat-2.5.0"
Multiple vulnerabilities have been discovered in Expat, the worst of which could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/expat | * | < 2.4.9 | >= 2.4.9 |
Expat is a set of XML parsing libraries.
Multiple vulnerabilities have been discovered in Expat. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Expat users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/expat-2.4.9"
Multiple vulnerabilities have been found in Expat, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/expat | * | < 2.2.8 | >= 2.2.8 |
Expat is a set of XML parsing libraries.
Multiple vulnerabilities have been discovered in Expat. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Expat users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/expat-2.2.8"
Multiple vulnerabilities have been found in Expat, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/expat | * | < 2.2.0-r1 | >= 2.2.0-r1 |
Expat is a set of XML parsing libraries.
Multiple vulnerabilities have been discovered in Expat. Please review the CVE identifiers referenced below for details.
A remote attacker, by enticing a user to process a specially crafted XML file, could execute arbitrary code with the privileges of the process or cause a Denial of Service condition. This attack could also be used against automated systems that arbitrarily process XML files.
There is no known workaround at this time.
All Expat users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/expat-2.2.0-r1"
Multiple vulnerabilities have been found in Expat, possibly resulting in Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/expat | * | < 2.1.0_beta3 | >= 2.1.0_beta3 |
Expat is a set of XML parsing libraries.
Multiple vulnerabilities have been discovered in Expat. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted XML file in an application linked against Expat, possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All Expat users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/expat-2.1.0_beta3"
Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying some of these packages.