In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw32-expatUpgrade mingw64-expat | May 4, 2022 | Jun 24, 2019 |
| Alpine Linux | — | Upgrade expat | Jul 3, 2019 | Jun 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade expat-debuginfoUpgrade expat-develUpgrade expat-staticUpgrade expat | Oct 28, 2020 | Jun 24, 2019 |
| Amazon_linux | — | Upgrade expat | Dec 19, 2020 | Jun 24, 2019 |
| Centos_linux | — | Upgrade expat-debugsourceUpgrade expat-staticUpgrade expat-develUpgrade expatUpgrade expat-debuginfo | Oct 1, 2020 | Jun 24, 2019 |
| Debian | — | Upgrade expat | Jul 2, 2019 | Jun 24, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 18, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/expat. | Nov 25, 2019 | Jun 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade expatUpgrade expat-devel | Sep 12, 2019 | Jun 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade expat-develUpgrade expat | Sep 25, 2019 | Jun 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade expatUpgrade expat-devel | Jul 24, 2019 | Jun 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade expatUpgrade expat-devel | Jul 26, 2019 | Jun 24, 2019 |
| Ibm Http_server | — | Apply IBM HTTP Server Interim Fix PH14974 | Nov 5, 2019 | Jun 24, 2019 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Sep 18, 2019 | Sep 18, 2019 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/expat to version 2.2.7-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jun 24, 2019 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0. | Feb 28, 2022 | Jun 24, 2019 |
| Oracle_linux | — | Upgrade expat-staticUpgrade expat-develUpgrade expat | Oct 7, 2020 | Jun 24, 2019 |
| Redhat_linux | — | Upgrade expatUpgrade mingw64-expatUpgrade expat-staticNo solution existsUpgrade expat-debugsourceUpgrade mingw32-expatUpgrade mingw32-expat-debuginfoUpgrade mingw64-expat-debuginfoUpgrade expat-develUpgrade expat-debuginfo | Oct 1, 2020 | Jun 24, 2019 |
| Rocky_linux | — | Upgrade expat-debuginfoUpgrade expat-develUpgrade expatUpgrade expat-debugsource | Mar 12, 2024 | Jun 24, 2019 |
| Suse | — | Upgrade libexpat1Upgrade expatUpgrade libexpat-devel-32bitUpgrade libexpat1-32bitUpgrade libexpat-devel | Jul 14, 2019 | Jun 24, 2019 |
| Ubuntu | — | Upgrade libvtk5.8 (Ubuntu Pro)Upgrade libxmltok1 (Ubuntu Pro)Upgrade libvtk5.10 (Ubuntu Pro)Upgrade libexpat1Upgrade libexpat1 (Ubuntu Pro)Upgrade libxmltok1t64Upgrade lib64expat1Upgrade libxmltok1t64 (Ubuntu Pro)Upgrade lib64expat1 (Ubuntu Pro) | Jun 26, 2019 | Jun 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 24, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub