RHSA-2009:1625: Moderate: expat security update
Expat is a C library written by James Clark for parsing XML documents.Two buffer over-read flaws were found in the way Expat handled malformedUTF-8 sequences when processing XML files. A specially-crafted XML filecould cause applications using Expat to crash while parsing the file.(CVE-2009-3560, CVE-2009-3720)All expat users should upgrade to these updated packages, which containbackported patches to correct these issues. After installing the updatedpackages, applications using the Expat library must be restarted for theupdate to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:1625?
The severity of RHSA-2009:1625 is categorized as moderate.
How do I fix RHSA-2009:1625?
To fix RHSA-2009:1625, update the expat package to version 1.95.8-8.3.el5_4.2 or higher.
What is the impact of RHSA-2009:1625?
The impact of RHSA-2009:1625 includes potential application crashes when processing specially-crafted XML files.
Which software versions are affected by RHSA-2009:1625?
RHSA-2009:1625 affects specific versions of the expat and expat-devel packages including versions prior to 1.95.8-8.3.el5_4.2.
Is there a known exploit for RHSA-2009:1625?
There are no public exploits explicitly documented for RHSA-2009:1625, but it exposes systems to potential denial of service.