Amazon Linux 2023 Security Advisory: ALAS-2025-793
Advisory Release Date: 2025-01-06 19:21 Pacific
Advisory Updated Date: 2025-01-09 13:05 Pacific
Severity:
Medium
Issue Overview:
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. (CVE-2024-50602)
Affected Packages:
expat
Issue Correction:
Run dnf update expat --releasever 2023.6.20250107 to update your system.
New Packages:
aarch64:
expat-debugsource-2.6.3-1.amzn2023.0.2.aarch64
expat-debuginfo-2.6.3-1.amzn2023.0.2.aarch64
expat-2.6.3-1.amzn2023.0.2.aarch64
expat-static-2.6.3-1.amzn2023.0.2.aarch64
expat-devel-2.6.3-1.amzn2023.0.2.aarch64
src:
expat-2.6.3-1.amzn2023.0.2.src
x86_64:
expat-static-2.6.3-1.amzn2023.0.2.x86_64
expat-debugsource-2.6.3-1.amzn2023.0.2.x86_64
expat-debuginfo-2.6.3-1.amzn2023.0.2.x86_64
expat-devel-2.6.3-1.amzn2023.0.2.x86_64
expat-2.6.3-1.amzn2023.0.2.x86_64