An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade expat-develUpgrade expat | Sep 23, 2024 | Aug 30, 2024 |
| Alpine Linux | — | Upgrade qt5-qtwebengineUpgrade qt6-qtwebengineUpgrade expat | Oct 1, 2024 | Aug 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade expat-develUpgrade expatUpgrade expat-staticUpgrade expat-debuginfo | Dec 20, 2024 | Aug 30, 2024 |
| Amazon_linux | — | Upgrade expat | Jan 10, 2025 | Aug 30, 2024 |
| Amazon_linux_2023 | — | Upgrade expat-debuginfoUpgrade expat-develUpgrade expatUpgrade expat-staticUpgrade expat-debugsource | Feb 17, 2025 | Aug 30, 2024 |
| Apple Osx Libexpat | — | Upgrade macOS to the latest version | Dec 13, 2024 | Dec 11, 2024 |
| Debian | — | Upgrade expat | Sep 19, 2024 | Aug 30, 2024 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Sep 23, 2025 | Apr 8, 2025 |
| Freebsd | — | Upgrade qt6-webengineUpgrade expatUpgrade qt5-webengine | Nov 23, 2024 | Nov 23, 2024 |
| Gentoo Linux | — | Upgrade dev-qt/qtwebengine. | Jan 24, 2025 | Aug 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xmlrpc-c-help | Nov 11, 2024 | Aug 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade xmlrpc-c-help | Dec 12, 2024 | Aug 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade xmlrpc-c-help | Dec 12, 2024 | Aug 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xmlrpc-c-help | Nov 11, 2024 | Aug 30, 2024 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory13 | Nov 6, 2024 | Aug 30, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Feb 17, 2025 |
| Oracle_linux | — | Upgrade expat-develUpgrade expat | Oct 16, 2024 | Aug 30, 2024 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Oct 10, 2024 | Aug 30, 2024 |
| Redhat_linux | — | Upgrade expat-debuginfoUpgrade expat-develUpgrade expat-debugsourceUpgrade expatNo solution exists | Sep 19, 2024 | Aug 30, 2024 |
| Rocky_linux | — | Upgrade expat-debuginfoUpgrade expat-develUpgrade expat-debugsourceUpgrade expat | Oct 2, 2024 | Aug 30, 2024 |
| Suse | — | Upgrade libmozjs-128-0Upgrade mozjs128-develUpgrade mozjs115-develUpgrade libexpat1Upgrade mozjs128Upgrade libmozjs-115-0Upgrade libexpat-devel-32bitUpgrade expatUpgrade libmozjs-78-0Upgrade mozjs78-develUpgrade mozjs115Upgrade libexpat1-32bitUpgrade mozjs78Upgrade x3270Upgrade libexpat-devel | Dec 5, 2025 | Sep 19, 2024 |
| Ubuntu | — | Upgrade expat (Ubuntu Pro)Upgrade libxmltok1t64 (Ubuntu Pro)Upgrade lib64expat1 (Ubuntu Pro)Upgrade libexpat1Upgrade libxmltok1 (Ubuntu Pro)Upgrade libexpat1 (Ubuntu Pro)Upgrade expat | Sep 13, 2024 | Aug 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 30, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub