Amazon Linux 2023 Security Advisory: ALAS-2024-524
Advisory Release Date: 2024-02-15 02:51 Pacific
Advisory Updated Date: 2024-02-19 20:27 Pacific
Severity:
Medium
Issue Overview:
libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time. (CVE-2023-52426)
Affected Packages:
expat
Issue Correction:
Run dnf update expat --releasever 2023.3.20240219 to update your system.
New Packages:
aarch64:
expat-debugsource-2.5.0-1.amzn2023.0.3.aarch64
expat-debuginfo-2.5.0-1.amzn2023.0.3.aarch64
expat-2.5.0-1.amzn2023.0.3.aarch64
expat-static-2.5.0-1.amzn2023.0.3.aarch64
expat-devel-2.5.0-1.amzn2023.0.3.aarch64
src:
expat-2.5.0-1.amzn2023.0.3.src
x86_64:
expat-debugsource-2.5.0-1.amzn2023.0.3.x86_64
expat-2.5.0-1.amzn2023.0.3.x86_64
expat-static-2.5.0-1.amzn2023.0.3.x86_64
expat-debuginfo-2.5.0-1.amzn2023.0.3.x86_64
expat-devel-2.5.0-1.amzn2023.0.3.x86_64