Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-8176 (GCVE-0-2024-8176)
Vulnerability from cvelistv5 – Published: 2025-03-14 08:19 – Updated: 2026-04-22 15:55
VLAI
EPSS
Title
Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
Summary
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
Severity
7.5 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-674 - Uncontrolled Recursion
Assigner
References
39 references
Impacted products
34 products
| Vendor | Product | Version | |
|---|---|---|---|
|
Affected:
0 , < 2.7.0
(semver)
|
|||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:2.7.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:2.2.5-17.el8_10 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:8::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:1.51.0-11.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support |
Unaffected:
0:2.2.10-1.el8_2 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.2::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support |
Unaffected:
0:1.51.0-5.el8_2.2 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.2::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:2.2.10-1.el8_4 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:1.51.0-5.el8_4.2 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_tus:8.4::baseos cpe:/o:redhat:rhel_e4s:8.4::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:2.2.10-1.el8_4 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service |
Unaffected:
0:1.51.0-5.el8_4.2 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_tus:8.4::baseos cpe:/o:redhat:rhel_e4s:8.4::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions |
Unaffected:
0:1.51.0-5.el8_4.2 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_tus:8.4::baseos cpe:/o:redhat:rhel_e4s:8.4::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:2.2.10-1.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:1.51.0-6.el8_6.1 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:2.2.10-1.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:1.51.0-6.el8_6.1 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:2.2.10-1.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:1.51.0-6.el8_6.1 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/o:redhat:rhel_tus:8.6::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support |
Unaffected:
0:1.51.0-8.el8_8.1 , < *
(rpm)
cpe:/a:redhat:rhel_eus:8.8::crb cpe:/o:redhat:rhel_eus:8.8::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:2.2.10-1.el8_8 , < *
(rpm)
cpe:/o:redhat:rhel_tus:8.8::baseos cpe:/o:redhat:rhel_e4s:8.8::baseos |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:2.2.10-1.el8_8 , < *
(rpm)
cpe:/o:redhat:rhel_tus:8.8::baseos cpe:/o:redhat:rhel_e4s:8.8::baseos |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:2.5.0-3.el9_5.3 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:2.5.0-5.el9_6 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:2.2.10-12.el9_0.4 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:9.0::baseos cpe:/a:redhat:rhel_e4s:9.0::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:2.5.0-1.el9_2.3 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:9.2::baseos cpe:/a:redhat:rhel_e4s:9.2::appstream |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:2.5.0-2.el9_4.3 , < *
(rpm)
cpe:/o:redhat:rhel_eus:9.4::baseos cpe:/a:redhat:rhel_eus:9.4::appstream |
|
| Red Hat | Red Hat JBoss Core Services 2.4.62.SP1 |
cpe:/a:redhat:jboss_core_services:1 |
|
| Red Hat | DevWorkspace Operator 0.33 |
Unaffected:
sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd , < *
(rpm)
cpe:/a:redhat:devworkspace:0.33::el9 |
|
| Red Hat | Red Hat Discovery 1.14 |
Unaffected:
sha256:ad1045aa0de937c3a6969ec377f7bfeda9a44ee434a954e8245e9840316ffc1c , < *
(rpm)
cpe:/a:redhat:discovery:1.14::el9 |
|
| Red Hat | Red Hat Discovery 1.14 |
Unaffected:
sha256:492e412759cf0eedfa5b557f7b0865f8864f84d0ed75e11dc8d7a840837d9644 , < *
(rpm)
cpe:/a:redhat:discovery:1.14::el9 |
|
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
Date Public
2025-03-13 13:51
Credits
This issue was discovered by Jann Horn (Google Project Zero), Sandipan Roy (Red Hat), Sebastian Pipping (libexpat), and Tomas Korbar (Red Hat).
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-8176",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-14T13:13:22.690073Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-14T13:14:00.908Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-04T21:09:04.638Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2025/03/15/1"
},
{
"url": "https://blog.hartwork.org/posts/expat-2-7-0-released/"
},
{
"url": "https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52"
},
{
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1239618"
},
{
"url": "https://ubuntu.com/security/CVE-2024-8176"
},
{
"url": "https://security-tracker.debian.org/tracker/CVE-2024-8176"
},
{
"url": "https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53"
},
{
"url": "https://security.netapp.com/advisory/ntap-20250328-0009/"
},
{
"url": "https://www.kb.cert.org/vuls/id/760160"
},
{
"url": "http://seclists.org/fulldisclosure/2025/May/12"
},
{
"url": "http://seclists.org/fulldisclosure/2025/May/11"
},
{
"url": "http://seclists.org/fulldisclosure/2025/May/10"
},
{
"url": "http://seclists.org/fulldisclosure/2025/May/8"
},
{
"url": "http://seclists.org/fulldisclosure/2025/May/7"
},
{
"url": "http://seclists.org/fulldisclosure/2025/May/6"
},
{
"url": "http://www.openwall.com/lists/oss-security/2025/09/24/11"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://github.com/libexpat/libexpat/",
"defaultStatus": "unaffected",
"packageName": "libexpat",
"versions": [
{
"lessThan": "2.7.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.0"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.7.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.5-17.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb",
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"defaultStatus": "affected",
"packageName": "xmlrpc-c",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.51.0-11.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.2::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.10-1.el8_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.2::baseos"
],
"defaultStatus": "affected",
"packageName": "xmlrpc-c",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.51.0-5.el8_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos",
"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.10-1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos",
"cpe:/o:redhat:rhel_tus:8.4::baseos",
"cpe:/o:redhat:rhel_e4s:8.4::baseos"
],
"defaultStatus": "affected",
"packageName": "xmlrpc-c",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.51.0-5.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos",
"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.10-1.el8_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos",
"cpe:/o:redhat:rhel_tus:8.4::baseos",
"cpe:/o:redhat:rhel_e4s:8.4::baseos"
],
"defaultStatus": "affected",
"packageName": "xmlrpc-c",
"product": "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.51.0-5.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos",
"cpe:/o:redhat:rhel_tus:8.4::baseos",
"cpe:/o:redhat:rhel_e4s:8.4::baseos"
],
"defaultStatus": "affected",
"packageName": "xmlrpc-c",
"product": "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.51.0-5.el8_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.10-1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"packageName": "xmlrpc-c",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.51.0-6.el8_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.10-1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"packageName": "xmlrpc-c",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.51.0-6.el8_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.10-1.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"packageName": "xmlrpc-c",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.51.0-6.el8_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:8.8::crb",
"cpe:/o:redhat:rhel_eus:8.8::baseos"
],
"defaultStatus": "affected",
"packageName": "xmlrpc-c",
"product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.51.0-8.el8_8.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8::baseos",
"cpe:/o:redhat:rhel_e4s:8.8::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.10-1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8::baseos",
"cpe:/o:redhat:rhel_e4s:8.8::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.10-1.el8_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.0-3.el9_5.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.0-5.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.0-3.el9_5.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.0-5.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.0::baseos",
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.10-12.el9_0.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.2::baseos",
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.0-1.el9_2.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus:9.4::baseos",
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.0-2.el9_4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_core_services:1"
],
"defaultStatus": "unaffected",
"packageName": "expat",
"product": "Red Hat JBoss Core Services 2.4.62.SP1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:devworkspace:0.33::el9"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-project-clone-rhel9",
"product": "DevWorkspace Operator 0.33",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-server-rhel9",
"product": "Red Hat Discovery 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "sha256:ad1045aa0de937c3a6969ec377f7bfeda9a44ee434a954e8245e9840316ffc1c",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "sha256:492e412759cf0eedfa5b557f7b0865f8864f84d0ed75e11dc8d7a840837d9644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unknown",
"packageName": "compat-expat1",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unknown",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unknown",
"packageName": "expat",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unknown",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unknown",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "lua-expat",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "mingw-expat",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "firefox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "firefox:flatpak/firefox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "thunderbird",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "thunderbird:flatpak/thunderbird",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
}
],
"credits": [
{
"lang": "en",
"value": "This issue was discovered by Jann Horn (Google Project Zero), Sandipan Roy (Red Hat), Sebastian Pipping (libexpat), and Tomas Korbar (Red Hat)."
}
],
"datePublic": "2025-03-13T13:51:54.957Z",
"descriptions": [
{
"lang": "en",
"value": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Moderate"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"description": "Uncontrolled Recursion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-22T15:55:39.568Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2025:13681",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:13681"
},
{
"name": "RHSA-2025:22033",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:22033"
},
{
"name": "RHSA-2025:22034",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:22034"
},
{
"name": "RHSA-2025:22035",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:22035"
},
{
"name": "RHSA-2025:22607",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:22607"
},
{
"name": "RHSA-2025:22785",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:22785"
},
{
"name": "RHSA-2025:22842",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:22842"
},
{
"name": "RHSA-2025:22871",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:22871"
},
{
"name": "RHSA-2025:3531",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:3531"
},
{
"name": "RHSA-2025:3734",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:3734"
},
{
"name": "RHSA-2025:3913",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:3913"
},
{
"name": "RHSA-2025:4048",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:4048"
},
{
"name": "RHSA-2025:4446",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:4446"
},
{
"name": "RHSA-2025:4447",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:4447"
},
{
"name": "RHSA-2025:4448",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:4448"
},
{
"name": "RHSA-2025:4449",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:4449"
},
{
"name": "RHSA-2025:7444",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:7444"
},
{
"name": "RHSA-2025:7512",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:7512"
},
{
"name": "RHSA-2025:8385",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2025:8385"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"name": "RHBZ#2310137",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-06-12T00:00:00.000Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2025-03-13T13:51:54.957Z",
"value": "Made public."
}
],
"title": "Libexpat: expat: improper restriction of xml entity expansion depth in libexpat",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_generator": {
"engine": "cvelib 1.8.0"
},
"x_redhatCweChain": "CWE-674: Uncontrolled Recursion"
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2024-8176",
"datePublished": "2025-03-14T08:19:48.962Z",
"dateReserved": "2024-08-26T12:36:40.985Z",
"dateUpdated": "2026-04-22T15:55:39.568Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2024-8176",
"date": "2026-06-11",
"epss": "0.00803",
"percentile": "0.74543"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-8176\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2025-03-14T09:15:14.157\",\"lastModified\":\"2026-03-20T03:15:58.120\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.\"},{\"lang\":\"es\",\"value\":\"Existe una vulnerabilidad de desbordamiento de pila en la librer\u00eda libexpat debido a la forma en que gestiona la expansi\u00f3n recursiva de entidades en documentos XML. Al analizar un documento XML con referencias a entidades profundamente anidadas, libexpat puede verse forzado a recurrir indefinidamente, agotando el espacio de pila y provocando un bloqueo. Este problema podr\u00eda provocar una denegaci\u00f3n de servicio (DoS) o, en algunos casos, una corrupci\u00f3n de memoria explotable, seg\u00fan el entorno y el uso de la librer\u00eda.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-674\"}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2025:13681\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:22033\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:22034\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:22035\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:22607\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:22785\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:22842\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:22871\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:3531\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:3734\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:3913\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:4048\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:4446\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:4447\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:4448\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:4449\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:7444\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:7512\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:8385\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2024-8176\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2310137\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://github.com/libexpat/libexpat/issues/893\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://github.com/libexpat/libexpat/pull/973\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/10\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/7\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2025/03/15/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2025/09/24/11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://blog.hartwork.org/posts/expat-2-7-0-released/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.suse.com/show_bug.cgi?id=1239618\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security-tracker.debian.org/tracker/CVE-2024-8176\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20250328-0009/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://ubuntu.com/security/CVE-2024-8176\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.kb.cert.org/vuls/id/760160\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2025/03/15/1\"}, {\"url\": \"https://blog.hartwork.org/posts/expat-2-7-0-released/\"}, {\"url\": \"https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52\"}, {\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=1239618\"}, {\"url\": \"https://ubuntu.com/security/CVE-2024-8176\"}, {\"url\": \"https://security-tracker.debian.org/tracker/CVE-2024-8176\"}, {\"url\": \"https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20250328-0009/\"}, {\"url\": \"https://www.kb.cert.org/vuls/id/760160\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/12\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/11\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/10\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/8\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/7\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/6\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2025/09/24/11\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-04T21:09:04.638Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-8176\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-03-14T13:13:22.690073Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-03-14T13:13:55.965Z\"}}], \"cna\": {\"title\": \"Libexpat: expat: improper restriction of xml entity expansion depth in libexpat\", \"credits\": [{\"lang\": \"en\", \"value\": \"This issue was discovered by Jann Horn (Google Project Zero), Sandipan Roy (Red Hat), Sebastian Pipping (libexpat), and Tomas Korbar (Red Hat).\"}], \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Moderate\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.7.0\", \"versionType\": \"semver\"}], \"packageName\": \"libexpat\", \"collectionURL\": \"https://github.com/libexpat/libexpat/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.7.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.5-17.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::crb\", \"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.51.0-11.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xmlrpc-c\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.2 Advanced Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.10-1.el8_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.2 Advanced Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.51.0-5.el8_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xmlrpc-c\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.10-1.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_tus:8.4::baseos\", \"cpe:/o:redhat:rhel_e4s:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.51.0-5.el8_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xmlrpc-c\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.10-1.el8_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_tus:8.4::baseos\", \"cpe:/o:redhat:rhel_e4s:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.51.0-5.el8_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xmlrpc-c\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\", \"cpe:/o:redhat:rhel_tus:8.4::baseos\", \"cpe:/o:redhat:rhel_e4s:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.51.0-5.el8_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xmlrpc-c\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.10-1.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.51.0-6.el8_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xmlrpc-c\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.10-1.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.51.0-6.el8_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xmlrpc-c\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.10-1.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.51.0-6.el8_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xmlrpc-c\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:8.8::crb\", \"cpe:/o:redhat:rhel_eus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.51.0-8.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"xmlrpc-c\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.8::baseos\", \"cpe:/o:redhat:rhel_e4s:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.10-1.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.8::baseos\", \"cpe:/o:redhat:rhel_e4s:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.10-1.el8_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.0-3.el9_5.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.0-5.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.0-3.el9_5.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.0-5.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.0::baseos\", \"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.10-12.el9_0.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.2::baseos\", \"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.0-1.el9_2.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus:9.4::baseos\", \"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.0-2.el9_4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_core_services:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Core Services 2.4.62.SP1\", \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace:0.33::el9\"], \"vendor\": \"Red Hat\", \"product\": \"DevWorkspace Operator 0.33\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devworkspace/devworkspace-project-clone-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:ad1045aa0de937c3a6969ec377f7bfeda9a44ee434a954e8245e9840316ffc1c\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:492e412759cf0eedfa5b557f7b0865f8864f84d0ed75e11dc8d7a840837d9644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"compat-expat1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"lua-expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"mingw-expat\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"firefox:flatpak/firefox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"thunderbird:flatpak/thunderbird\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-06-12T00:00:00.000Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2025-03-13T13:51:54.957Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2025-03-13T13:51:54.957Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2025:13681\", \"name\": \"RHSA-2025:13681\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:22033\", \"name\": \"RHSA-2025:22033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:22034\", \"name\": \"RHSA-2025:22034\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:22035\", \"name\": \"RHSA-2025:22035\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:22607\", \"name\": \"RHSA-2025:22607\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:22785\", \"name\": \"RHSA-2025:22785\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:22842\", \"name\": \"RHSA-2025:22842\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:22871\", \"name\": \"RHSA-2025:22871\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:3531\", \"name\": \"RHSA-2025:3531\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:3734\", \"name\": \"RHSA-2025:3734\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:3913\", \"name\": \"RHSA-2025:3913\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:4048\", \"name\": \"RHSA-2025:4048\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:4446\", \"name\": \"RHSA-2025:4446\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:4447\", \"name\": \"RHSA-2025:4447\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:4448\", \"name\": \"RHSA-2025:4448\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:4449\", \"name\": \"RHSA-2025:4449\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:7444\", \"name\": \"RHSA-2025:7444\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:7512\", \"name\": \"RHSA-2025:7512\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:8385\", \"name\": \"RHSA-2025:8385\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2024-8176\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2310137\", \"name\": \"RHBZ#2310137\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://github.com/libexpat/libexpat/issues/893\"}, {\"url\": \"https://github.com/libexpat/libexpat/pull/973\"}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-674\", \"description\": \"Uncontrolled Recursion\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-04-22T15:55:39.568Z\"}, \"x_redhatCweChain\": \"CWE-674: Uncontrolled Recursion\"}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-8176\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-22T15:55:39.568Z\", \"dateReserved\": \"2024-08-26T12:36:40.985Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2025-03-14T08:19:48.962Z\", \"assignerShortName\": \"redhat\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2025:3531
Vulnerability from csaf_redhat - Published: 2025-04-02 14:55 - Updated: 2026-06-02 15:22Summary
Red Hat Security Advisory: expat security update
Severity
Moderate
Notes
Topic: An update for expat is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Expat is a C library for parsing XML documents.
Security Fix(es):
* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
10 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for expat is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:3531",
"url": "https://access.redhat.com/errata/RHSA-2025:3531"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3531.json"
}
],
"title": "Red Hat Security Advisory: expat security update",
"tracking": {
"current_release_date": "2026-06-02T15:22:14+00:00",
"generator": {
"date": "2026-06-02T15:22:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2025:3531",
"initial_release_date": "2025-04-02T14:55:22+00:00",
"revision_history": [
{
"date": "2025-04-02T14:55:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-04-02T14:55:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-02T15:22:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.5.0-3.el9_5.3.src",
"product": {
"name": "expat-0:2.5.0-3.el9_5.3.src",
"product_id": "expat-0:2.5.0-3.el9_5.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-3.el9_5.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.5.0-3.el9_5.3.aarch64",
"product": {
"name": "expat-0:2.5.0-3.el9_5.3.aarch64",
"product_id": "expat-0:2.5.0-3.el9_5.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-3.el9_5.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"product": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"product_id": "expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-3.el9_5.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"product": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"product_id": "expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-3.el9_5.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"product": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"product_id": "expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-3.el9_5.3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.5.0-3.el9_5.3.ppc64le",
"product": {
"name": "expat-0:2.5.0-3.el9_5.3.ppc64le",
"product_id": "expat-0:2.5.0-3.el9_5.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-3.el9_5.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"product": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"product_id": "expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-3.el9_5.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"product": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"product_id": "expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-3.el9_5.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"product": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"product_id": "expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-3.el9_5.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.5.0-3.el9_5.3.i686",
"product": {
"name": "expat-0:2.5.0-3.el9_5.3.i686",
"product_id": "expat-0:2.5.0-3.el9_5.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-3.el9_5.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"product": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"product_id": "expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-3.el9_5.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"product": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"product_id": "expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-3.el9_5.3?arch=i686"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-3.el9_5.3.i686",
"product": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.i686",
"product_id": "expat-devel-0:2.5.0-3.el9_5.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-3.el9_5.3?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.5.0-3.el9_5.3.x86_64",
"product": {
"name": "expat-0:2.5.0-3.el9_5.3.x86_64",
"product_id": "expat-0:2.5.0-3.el9_5.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-3.el9_5.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"product": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"product_id": "expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-3.el9_5.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"product": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"product_id": "expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-3.el9_5.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-3.el9_5.3.x86_64",
"product": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.x86_64",
"product_id": "expat-devel-0:2.5.0-3.el9_5.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-3.el9_5.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.5.0-3.el9_5.3.s390x",
"product": {
"name": "expat-0:2.5.0-3.el9_5.3.s390x",
"product_id": "expat-0:2.5.0-3.el9_5.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-3.el9_5.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"product": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"product_id": "expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-3.el9_5.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"product": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"product_id": "expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-3.el9_5.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-3.el9_5.3.s390x",
"product": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.s390x",
"product_id": "expat-devel-0:2.5.0-3.el9_5.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-3.el9_5.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.aarch64",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.i686",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.ppc64le",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.s390x",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.src",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.x86_64",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.i686",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.s390x",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.x86_64",
"relates_to_product_reference": "AppStream-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.aarch64",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.i686",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.ppc64le",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.s390x",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.src",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-3.el9_5.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64"
},
"product_reference": "expat-0:2.5.0-3.el9_5.3.x86_64",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64"
},
"product_reference": "expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-3.el9_5.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64"
},
"product_reference": "expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.i686",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.s390x",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-3.el9_5.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64"
},
"product_reference": "expat-devel-0:2.5.0-3.el9_5.3.x86_64",
"relates_to_product_reference": "BaseOS-9.5.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-04-02T14:55:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:3531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src",
"AppStream-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x",
"AppStream-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.src",
"BaseOS-9.5.0.Z.MAIN:expat-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-debuginfo-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-debugsource-0:2.5.0-3.el9_5.3.x86_64",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.aarch64",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.i686",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.ppc64le",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.s390x",
"BaseOS-9.5.0.Z.MAIN:expat-devel-0:2.5.0-3.el9_5.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
RHSA-2025:3734
Vulnerability from csaf_redhat - Published: 2025-04-09 05:01 - Updated: 2026-04-22 15:56Summary
Red Hat Security Advisory: DevWorkspace Operator 0.33.0 release.
Severity
Moderate
Notes
Topic: DevWorkspace Operator 0.33.0 has been released.
Details: The DevWorkspace Operator extends OpenShift to provide DevWorkspace support. Security Fix(es): * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64 | — |
Workaround
|
|
| Unresolved product id: DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64 | — |
Workaround
|
|
| Unresolved product id: DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x | — |
Workaround
|
|
| Unresolved product id: DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le | — |
Workaround
|
|
| Unresolved product id: DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64 | — |
Workaround
|
Threats
Impact
Moderate
References
11 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "DevWorkspace Operator 0.33.0 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "The DevWorkspace Operator extends OpenShift to provide DevWorkspace support. Security Fix(es): * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:3734",
"url": "https://access.redhat.com/errata/RHSA-2025:3734"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-8176",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3734.json"
}
],
"title": "Red Hat Security Advisory: DevWorkspace Operator 0.33.0 release.",
"tracking": {
"current_release_date": "2026-04-22T15:56:54+00:00",
"generator": {
"date": "2026-04-22T15:56:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.5"
}
},
"id": "RHSA-2025:3734",
"initial_release_date": "2025-04-09T05:01:50+00:00",
"revision_history": [
{
"date": "2025-04-09T05:01:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-04-09T05:01:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-22T15:56:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "DevWorkspace Operator 0.33",
"product": {
"name": "DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:devworkspace:0.33::el9"
}
}
}
],
"category": "product_family",
"name": "DevWorkspace Operator"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64",
"product": {
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64",
"product_id": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devworkspace-rhel9-operator@sha256%3Ad42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794?arch=amd64\u0026repository_url=registry.redhat.io/devworkspace\u0026tag=0.33-1744077845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64",
"product": {
"name": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64",
"product_id": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devworkspace-operator-bundle@sha256%3Aba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe?arch=amd64\u0026repository_url=registry.redhat.io/devworkspace\u0026tag=0.33-1744081731"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64",
"product": {
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64",
"product_id": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devworkspace-project-clone-rhel9@sha256%3Ae74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe?arch=amd64\u0026repository_url=registry.redhat.io/devworkspace\u0026tag=0.33-1744075017"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x",
"product": {
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x",
"product_id": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x",
"product_identification_helper": {
"purl": "pkg:oci/devworkspace-rhel9-operator@sha256%3A114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281?arch=s390x\u0026repository_url=registry.redhat.io/devworkspace\u0026tag=0.33-1744077845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x",
"product": {
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x",
"product_id": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x",
"product_identification_helper": {
"purl": "pkg:oci/devworkspace-project-clone-rhel9@sha256%3A9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919?arch=s390x\u0026repository_url=registry.redhat.io/devworkspace\u0026tag=0.33-1744075017"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le",
"product": {
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le",
"product_id": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/devworkspace-rhel9-operator@sha256%3A1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c?arch=ppc64le\u0026repository_url=registry.redhat.io/devworkspace\u0026tag=0.33-1744077845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le",
"product": {
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le",
"product_id": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/devworkspace-project-clone-rhel9@sha256%3A937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd?arch=ppc64le\u0026repository_url=registry.redhat.io/devworkspace\u0026tag=0.33-1744075017"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64",
"product": {
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64",
"product_id": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/devworkspace-rhel9-operator@sha256%3A0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a?arch=arm64\u0026repository_url=registry.redhat.io/devworkspace\u0026tag=0.33-1744077845"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64",
"product": {
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64",
"product_id": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/devworkspace-project-clone-rhel9@sha256%3Ab41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a?arch=arm64\u0026repository_url=registry.redhat.io/devworkspace\u0026tag=0.33-1744075017"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64 as a component of DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64"
},
"product_reference": "registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64",
"relates_to_product_reference": "DevWorkspace Operator 0.33"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le as a component of DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le"
},
"product_reference": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le",
"relates_to_product_reference": "DevWorkspace Operator 0.33"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x as a component of DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x"
},
"product_reference": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x",
"relates_to_product_reference": "DevWorkspace Operator 0.33"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64 as a component of DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64"
},
"product_reference": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64",
"relates_to_product_reference": "DevWorkspace Operator 0.33"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64 as a component of DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64"
},
"product_reference": "registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64",
"relates_to_product_reference": "DevWorkspace Operator 0.33"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64 as a component of DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64"
},
"product_reference": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64",
"relates_to_product_reference": "DevWorkspace Operator 0.33"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x as a component of DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x"
},
"product_reference": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x",
"relates_to_product_reference": "DevWorkspace Operator 0.33"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le as a component of DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le"
},
"product_reference": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le",
"relates_to_product_reference": "DevWorkspace Operator 0.33"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64 as a component of DevWorkspace Operator 0.33",
"product_id": "DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64"
},
"product_reference": "registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64",
"relates_to_product_reference": "DevWorkspace Operator 0.33"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64"
],
"known_not_affected": [
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-04-09T05:01:50+00:00",
"details": "To start using the DevWorkspace Operator, install the DevWorkspace Operator from OpenShift OperatorHub on OpenShift Container Platform 4.14 or higher.",
"product_ids": [
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:3734"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-operator-bundle@sha256:ba95eb891941a5057fdba86090df7e84469e0afdf46745f98471456fb242bcfe_amd64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:937e1dff95d06b971adee9aeb55e0e2e963b6b14594f30354bb9cdb039c081dd_ppc64le",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:9cde560029ea98eb500a811c82e4d55318d686e01383c00e857b838a2db88919_s390x",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:b41c498da32fde3fa636594ef93d2206ca1a3bc306e401eaae035dc18d30654a_arm64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-project-clone-rhel9@sha256:e74a7b34371e86a04a718c881664025f52b312d9a9cbd045214f869131b7cfbe_amd64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:0298a18fc46d73a5623d9bcc794c88770b04d2ed2b426c278ff69df02f781f3a_arm64",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:114baaa70414618ba258fe6a67d3ea9d1f7dcc6f6dfb1230e64193d401ea4281_s390x",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:1301ce1b524de3ea93612ea5565f301606ad50ba6b62c212b0ec73ee0fdc7e2c_ppc64le",
"DevWorkspace Operator 0.33:registry.redhat.io/devworkspace/devworkspace-rhel9-operator@sha256:d42bb742b2ecbc5c8c90202c6231f161dee071b7d7c5ebf4732aa36c42064794_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
RHSA-2025:3913
Vulnerability from csaf_redhat - Published: 2025-04-15 16:28 - Updated: 2026-06-02 15:22Summary
Red Hat Security Advisory: expat security update
Severity
Moderate
Notes
Topic: An update for expat is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Expat is a C library for parsing XML documents.
Security Fix(es):
* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
10 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for expat is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:3913",
"url": "https://access.redhat.com/errata/RHSA-2025:3913"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3913.json"
}
],
"title": "Red Hat Security Advisory: expat security update",
"tracking": {
"current_release_date": "2026-06-02T15:22:16+00:00",
"generator": {
"date": "2026-06-02T15:22:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2025:3913",
"initial_release_date": "2025-04-15T16:28:28+00:00",
"revision_history": [
{
"date": "2025-04-15T16:28:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-04-15T16:28:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-02T15:22:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.2.5-17.el8_10.src",
"product": {
"name": "expat-0:2.2.5-17.el8_10.src",
"product_id": "expat-0:2.2.5-17.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.2.5-17.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.2.5-17.el8_10.aarch64",
"product": {
"name": "expat-0:2.2.5-17.el8_10.aarch64",
"product_id": "expat-0:2.2.5-17.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.2.5-17.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.2.5-17.el8_10.aarch64",
"product": {
"name": "expat-devel-0:2.2.5-17.el8_10.aarch64",
"product_id": "expat-devel-0:2.2.5-17.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.2.5-17.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.2.5-17.el8_10.aarch64",
"product": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.aarch64",
"product_id": "expat-debugsource-0:2.2.5-17.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.2.5-17.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.2.5-17.el8_10.aarch64",
"product": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.aarch64",
"product_id": "expat-debuginfo-0:2.2.5-17.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.2.5-17.el8_10?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.2.5-17.el8_10.ppc64le",
"product": {
"name": "expat-0:2.2.5-17.el8_10.ppc64le",
"product_id": "expat-0:2.2.5-17.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.2.5-17.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.2.5-17.el8_10.ppc64le",
"product": {
"name": "expat-devel-0:2.2.5-17.el8_10.ppc64le",
"product_id": "expat-devel-0:2.2.5-17.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.2.5-17.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.2.5-17.el8_10.ppc64le",
"product": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.ppc64le",
"product_id": "expat-debugsource-0:2.2.5-17.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.2.5-17.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.2.5-17.el8_10.ppc64le",
"product": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.ppc64le",
"product_id": "expat-debuginfo-0:2.2.5-17.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.2.5-17.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.2.5-17.el8_10.i686",
"product": {
"name": "expat-0:2.2.5-17.el8_10.i686",
"product_id": "expat-0:2.2.5-17.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.2.5-17.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.2.5-17.el8_10.i686",
"product": {
"name": "expat-devel-0:2.2.5-17.el8_10.i686",
"product_id": "expat-devel-0:2.2.5-17.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.2.5-17.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.2.5-17.el8_10.i686",
"product": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.i686",
"product_id": "expat-debugsource-0:2.2.5-17.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.2.5-17.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.2.5-17.el8_10.i686",
"product": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.i686",
"product_id": "expat-debuginfo-0:2.2.5-17.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.2.5-17.el8_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.2.5-17.el8_10.x86_64",
"product": {
"name": "expat-0:2.2.5-17.el8_10.x86_64",
"product_id": "expat-0:2.2.5-17.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.2.5-17.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.2.5-17.el8_10.x86_64",
"product": {
"name": "expat-devel-0:2.2.5-17.el8_10.x86_64",
"product_id": "expat-devel-0:2.2.5-17.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.2.5-17.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.2.5-17.el8_10.x86_64",
"product": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.x86_64",
"product_id": "expat-debugsource-0:2.2.5-17.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.2.5-17.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.2.5-17.el8_10.x86_64",
"product": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.x86_64",
"product_id": "expat-debuginfo-0:2.2.5-17.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.2.5-17.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.2.5-17.el8_10.s390x",
"product": {
"name": "expat-0:2.2.5-17.el8_10.s390x",
"product_id": "expat-0:2.2.5-17.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.2.5-17.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.2.5-17.el8_10.s390x",
"product": {
"name": "expat-devel-0:2.2.5-17.el8_10.s390x",
"product_id": "expat-devel-0:2.2.5-17.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.2.5-17.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.2.5-17.el8_10.s390x",
"product": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.s390x",
"product_id": "expat-debugsource-0:2.2.5-17.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.2.5-17.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.2.5-17.el8_10.s390x",
"product": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.s390x",
"product_id": "expat-debuginfo-0:2.2.5-17.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.2.5-17.el8_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.2.5-17.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.aarch64"
},
"product_reference": "expat-0:2.2.5-17.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.2.5-17.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.i686"
},
"product_reference": "expat-0:2.2.5-17.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.2.5-17.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.ppc64le"
},
"product_reference": "expat-0:2.2.5-17.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.2.5-17.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.s390x"
},
"product_reference": "expat-0:2.2.5-17.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.2.5-17.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.src"
},
"product_reference": "expat-0:2.2.5-17.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.2.5-17.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.x86_64"
},
"product_reference": "expat-0:2.2.5-17.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.aarch64"
},
"product_reference": "expat-debuginfo-0:2.2.5-17.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.i686"
},
"product_reference": "expat-debuginfo-0:2.2.5-17.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.ppc64le"
},
"product_reference": "expat-debuginfo-0:2.2.5-17.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.s390x"
},
"product_reference": "expat-debuginfo-0:2.2.5-17.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.2.5-17.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.x86_64"
},
"product_reference": "expat-debuginfo-0:2.2.5-17.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.aarch64"
},
"product_reference": "expat-debugsource-0:2.2.5-17.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.i686"
},
"product_reference": "expat-debugsource-0:2.2.5-17.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.ppc64le"
},
"product_reference": "expat-debugsource-0:2.2.5-17.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.s390x"
},
"product_reference": "expat-debugsource-0:2.2.5-17.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.2.5-17.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.x86_64"
},
"product_reference": "expat-debugsource-0:2.2.5-17.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.2.5-17.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.aarch64"
},
"product_reference": "expat-devel-0:2.2.5-17.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.2.5-17.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.i686"
},
"product_reference": "expat-devel-0:2.2.5-17.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.2.5-17.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.ppc64le"
},
"product_reference": "expat-devel-0:2.2.5-17.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.2.5-17.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.s390x"
},
"product_reference": "expat-devel-0:2.2.5-17.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.2.5-17.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.x86_64"
},
"product_reference": "expat-devel-0:2.2.5-17.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-04-15T16:28:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:3913"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debuginfo-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-debugsource-0:2.2.5-17.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:expat-devel-0:2.2.5-17.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
RHSA-2025:4048
Vulnerability from csaf_redhat - Published: 2025-04-23 11:47 - Updated: 2026-06-02 15:22Summary
Red Hat Security Advisory: xmlrpc-c security update
Severity
Moderate
Notes
Topic: An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.
Security Fix(es):
* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
112 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
10 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.\n\nSecurity Fix(es):\n\n* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:4048",
"url": "https://access.redhat.com/errata/RHSA-2025:4048"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4048.json"
}
],
"title": "Red Hat Security Advisory: xmlrpc-c security update",
"tracking": {
"current_release_date": "2026-06-02T15:22:14+00:00",
"generator": {
"date": "2026-06-02T15:22:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2025:4048",
"initial_release_date": "2025-04-23T11:47:20+00:00",
"revision_history": [
{
"date": "2025-04-23T11:47:20+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-04-23T11:47:20+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-02T15:22:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-11.el8_10.src",
"product": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.src",
"product_id": "xmlrpc-c-0:1.51.0-11.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-11.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-11.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"product_id": "xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-11.el8_10?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-11.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"product_id": "xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-11.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-11.el8_10?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"product_id": "xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-11.el8_10?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-11.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64",
"product_id": "xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-11.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-11.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"product_id": "xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-11.el8_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.src as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.src",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)",
"product_id": "CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64",
"relates_to_product_reference": "CRB-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-04-23T11:47:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:4048"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.src",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debuginfo-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-debugsource-0:1.51.0-11.el8_10.x86_64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.aarch64",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.i686",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.ppc64le",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.s390x",
"CRB-8.10.0.Z.MAIN.EUS:xmlrpc-c-devel-0:1.51.0-11.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
RHSA-2025:4446
Vulnerability from csaf_redhat - Published: 2025-05-05 01:53 - Updated: 2026-06-02 15:22Summary
Red Hat Security Advisory: xmlrpc-c security update
Severity
Moderate
Notes
Topic: An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.
Security Fix(es):
* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
112 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
10 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.\n\nSecurity Fix(es):\n\n* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:4446",
"url": "https://access.redhat.com/errata/RHSA-2025:4446"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4446.json"
}
],
"title": "Red Hat Security Advisory: xmlrpc-c security update",
"tracking": {
"current_release_date": "2026-06-02T15:22:19+00:00",
"generator": {
"date": "2026-06-02T15:22:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2025:4446",
"initial_release_date": "2025-05-05T01:53:58+00:00",
"revision_history": [
{
"date": "2025-05-05T01:53:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-05-05T01:53:58+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-02T15:22:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:8.8::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product": {
"name": "Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.8::crb"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"product": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"product_id": "xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-8.el8_8.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-8.el8_8.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"product_id": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-8.el8_8.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"product_id": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-8.el8_8.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-8.el8_8.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"product_id": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-8.el8_8.1?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-8.el8_8.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64",
"product_id": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-8.el8_8.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B@1.51.0-8.el8_8.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"product": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"product_id": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-devel@1.51.0-8.el8_8.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.src as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.8.8)",
"product_id": "CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64"
},
"product_reference": "xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64",
"relates_to_product_reference": "CRB-8.8.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-05-05T01:53:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:4446"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"BaseOS-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.src",
"CRB-8.8.0.Z.EUS:xmlrpc-c-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-apps-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-c++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client++-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-client-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debuginfo-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-debugsource-0:1.51.0-8.el8_8.1.x86_64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.aarch64",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.i686",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.ppc64le",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.s390x",
"CRB-8.8.0.Z.EUS:xmlrpc-c-devel-0:1.51.0-8.el8_8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
RHSA-2025:4447
Vulnerability from csaf_redhat - Published: 2025-05-05 01:27 - Updated: 2026-06-02 15:22Summary
Red Hat Security Advisory: xmlrpc-c security update
Severity
Moderate
Notes
Topic: An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.
Security Fix(es):
* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
10 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.\n\nSecurity Fix(es):\n\n* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:4447",
"url": "https://access.redhat.com/errata/RHSA-2025:4447"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4447.json"
}
],
"title": "Red Hat Security Advisory: xmlrpc-c security update",
"tracking": {
"current_release_date": "2026-06-02T15:22:18+00:00",
"generator": {
"date": "2026-06-02T15:22:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2025:4447",
"initial_release_date": "2025-05-05T01:27:28+00:00",
"revision_history": [
{
"date": "2025-05-05T01:27:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-05-05T01:27:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-02T15:22:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.2::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-5.el8_2.2.src",
"product": {
"name": "xmlrpc-c-0:1.51.0-5.el8_2.2.src",
"product_id": "xmlrpc-c-0:1.51.0-5.el8_2.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-5.el8_2.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-5.el8_2.2.i686",
"product": {
"name": "xmlrpc-c-0:1.51.0-5.el8_2.2.i686",
"product_id": "xmlrpc-c-0:1.51.0-5.el8_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-5.el8_2.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686",
"product_id": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-5.el8_2.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-5.el8_2.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-5.el8_2.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-5.el8_2.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-5.el8_2.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-5.el8_2.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-5.el8_2.2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64",
"product": {
"name": "xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64",
"product_id": "xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-5.el8_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64",
"product_id": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-5.el8_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-5.el8_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-5.el8_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-5.el8_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-5.el8_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-5.el8_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-5.el8_2.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_2.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_2.2.i686",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_2.2.src as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_2.2.src",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.src",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-05-05T01:27:28+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.src",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:4447"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.src",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.src",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_2.2.x86_64",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.i686",
"BaseOS-8.2.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
RHSA-2025:4448
Vulnerability from csaf_redhat - Published: 2025-05-05 01:49 - Updated: 2026-06-02 15:22Summary
Red Hat Security Advisory: xmlrpc-c security update
Severity
Moderate
Notes
Topic: An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.
Security Fix(es):
* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
59 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
10 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.\n\nSecurity Fix(es):\n\n* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:4448",
"url": "https://access.redhat.com/errata/RHSA-2025:4448"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4448.json"
}
],
"title": "Red Hat Security Advisory: xmlrpc-c security update",
"tracking": {
"current_release_date": "2026-06-02T15:22:18+00:00",
"generator": {
"date": "2026-06-02T15:22:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2025:4448",
"initial_release_date": "2025-05-05T01:49:29+00:00",
"revision_history": [
{
"date": "2025-05-05T01:49:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-05-05T01:49:29+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-02T15:22:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.4::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.4::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"product": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"product_id": "xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-5.el8_4.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"product": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"product_id": "xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-5.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"product_id": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-5.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-5.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-5.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-5.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-5.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-5.el8_4.2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-5.el8_4.2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"product": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"product_id": "xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-5.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"product_id": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-5.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-5.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-5.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-5.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-5.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-5.el8_4.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-5.el8_4.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le",
"product": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le",
"product_id": "xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-5.el8_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le",
"product_id": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-5.el8_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-5.el8_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-5.el8_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-5.el8_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-5.el8_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-5.el8_4.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-5.el8_4.2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"relates_to_product_reference": "BaseOS-8.4.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-05-05T01:49:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:4448"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.ppc64le",
"BaseOS-8.4.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.src",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-5.el8_4.2.x86_64",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.i686",
"BaseOS-8.4.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-5.el8_4.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
RHSA-2025:4449
Vulnerability from csaf_redhat - Published: 2025-05-05 01:57 - Updated: 2026-06-02 15:22Summary
Red Hat Security Advisory: xmlrpc-c security update
Severity
Moderate
Notes
Topic: An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.
Security Fix(es):
* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
75 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
10 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.\n\nSecurity Fix(es):\n\n* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:4449",
"url": "https://access.redhat.com/errata/RHSA-2025:4449"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4449.json"
}
],
"title": "Red Hat Security Advisory: xmlrpc-c security update",
"tracking": {
"current_release_date": "2026-06-02T15:22:17+00:00",
"generator": {
"date": "2026-06-02T15:22:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2025:4449",
"initial_release_date": "2025-05-05T01:57:18+00:00",
"revision_history": [
{
"date": "2025-05-05T01:57:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-05-05T01:57:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-02T15:22:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"product": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"product_id": "xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-6.el8_6.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"product": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"product_id": "xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-6.el8_6.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"product_id": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-6.el8_6.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-6.el8_6.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-6.el8_6.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-6.el8_6.1?arch=i686"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-6.el8_6.1?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"product": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"product_id": "xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-6.el8_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"product_id": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-6.el8_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-6.el8_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-6.el8_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-6.el8_6.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-6.el8_6.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64",
"product": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64",
"product_id": "xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-6.el8_6.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64",
"product_id": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-6.el8_6.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-6.el8_6.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-6.el8_6.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-6.el8_6.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-6.el8_6.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le",
"product": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le",
"product_id": "xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-6.el8_6.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le",
"product_id": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-6.el8_6.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-6.el8_6.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-6.el8_6.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-6.el8_6.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-6.el8_6.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.s390x",
"product": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.s390x",
"product_id": "xmlrpc-c-0:1.51.0-6.el8_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c@1.51.0-6.el8_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x",
"product": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x",
"product_id": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client@1.51.0-6.el8_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x",
"product": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x",
"product_id": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debugsource@1.51.0-6.el8_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_id": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-apps-debuginfo@1.51.0-6.el8_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_id": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-c%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_id": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client%2B%2B-debuginfo@1.51.0-6.el8_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_id": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-client-debuginfo@1.51.0-6.el8_6.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_id": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xmlrpc-c-debuginfo@1.51.0-6.el8_6.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.s390x"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64"
},
"product_reference": "xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-05-05T01:57:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:4449"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.AUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.aarch64",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.ppc64le",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.s390x",
"BaseOS-8.6.0.Z.E4S:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.src",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-apps-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-c++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client++-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-client-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debuginfo-0:1.51.0-6.el8_6.1.x86_64",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.i686",
"BaseOS-8.6.0.Z.TUS:xmlrpc-c-debugsource-0:1.51.0-6.el8_6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
RHSA-2025:7444
Vulnerability from csaf_redhat - Published: 2025-05-13 14:13 - Updated: 2026-06-02 15:22Summary
Red Hat Security Advisory: expat security update
Severity
Moderate
Notes
Topic: An update for expat is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Expat is a C library for parsing XML documents.
Security Fix(es):
* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
10 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for expat is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:7444",
"url": "https://access.redhat.com/errata/RHSA-2025:7444"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7444.json"
}
],
"title": "Red Hat Security Advisory: expat security update",
"tracking": {
"current_release_date": "2026-06-02T15:22:14+00:00",
"generator": {
"date": "2026-06-02T15:22:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2025:7444",
"initial_release_date": "2025-05-13T14:13:46+00:00",
"revision_history": [
{
"date": "2025-05-13T14:13:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-05-13T14:13:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-02T15:22:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-5.el9_6.aarch64",
"product": {
"name": "expat-devel-0:2.5.0-5.el9_6.aarch64",
"product_id": "expat-devel-0:2.5.0-5.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-5.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"product": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"product_id": "expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-5.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"product": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"product_id": "expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-5.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-0:2.5.0-5.el9_6.aarch64",
"product": {
"name": "expat-0:2.5.0-5.el9_6.aarch64",
"product_id": "expat-0:2.5.0-5.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-5.el9_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-5.el9_6.ppc64le",
"product": {
"name": "expat-devel-0:2.5.0-5.el9_6.ppc64le",
"product_id": "expat-devel-0:2.5.0-5.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-5.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"product": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"product_id": "expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-5.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"product": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"product_id": "expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-5.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-0:2.5.0-5.el9_6.ppc64le",
"product": {
"name": "expat-0:2.5.0-5.el9_6.ppc64le",
"product_id": "expat-0:2.5.0-5.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-5.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-5.el9_6.i686",
"product": {
"name": "expat-devel-0:2.5.0-5.el9_6.i686",
"product_id": "expat-devel-0:2.5.0-5.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-5.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-5.el9_6.i686",
"product": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.i686",
"product_id": "expat-debugsource-0:2.5.0-5.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-5.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-5.el9_6.i686",
"product": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.i686",
"product_id": "expat-debuginfo-0:2.5.0-5.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-5.el9_6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "expat-0:2.5.0-5.el9_6.i686",
"product": {
"name": "expat-0:2.5.0-5.el9_6.i686",
"product_id": "expat-0:2.5.0-5.el9_6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-5.el9_6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-5.el9_6.x86_64",
"product": {
"name": "expat-devel-0:2.5.0-5.el9_6.x86_64",
"product_id": "expat-devel-0:2.5.0-5.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-5.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"product": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"product_id": "expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-5.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"product": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"product_id": "expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-5.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-0:2.5.0-5.el9_6.x86_64",
"product": {
"name": "expat-0:2.5.0-5.el9_6.x86_64",
"product_id": "expat-0:2.5.0-5.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-5.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-devel-0:2.5.0-5.el9_6.s390x",
"product": {
"name": "expat-devel-0:2.5.0-5.el9_6.s390x",
"product_id": "expat-devel-0:2.5.0-5.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.5.0-5.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.5.0-5.el9_6.s390x",
"product": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.s390x",
"product_id": "expat-debugsource-0:2.5.0-5.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.5.0-5.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"product": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"product_id": "expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.5.0-5.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-0:2.5.0-5.el9_6.s390x",
"product": {
"name": "expat-0:2.5.0-5.el9_6.s390x",
"product_id": "expat-0:2.5.0-5.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-5.el9_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.5.0-5.el9_6.src",
"product": {
"name": "expat-0:2.5.0-5.el9_6.src",
"product_id": "expat-0:2.5.0-5.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.5.0-5.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64"
},
"product_reference": "expat-0:2.5.0-5.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686"
},
"product_reference": "expat-0:2.5.0-5.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le"
},
"product_reference": "expat-0:2.5.0-5.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x"
},
"product_reference": "expat-0:2.5.0-5.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src"
},
"product_reference": "expat-0:2.5.0-5.el9_6.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64"
},
"product_reference": "expat-0:2.5.0-5.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.i686",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64"
},
"product_reference": "expat-0:2.5.0-5.el9_6.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686"
},
"product_reference": "expat-0:2.5.0-5.el9_6.i686",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le"
},
"product_reference": "expat-0:2.5.0-5.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x"
},
"product_reference": "expat-0:2.5.0-5.el9_6.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src"
},
"product_reference": "expat-0:2.5.0-5.el9_6.src",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.5.0-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64"
},
"product_reference": "expat-0:2.5.0-5.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.i686",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.5.0-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64"
},
"product_reference": "expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.i686",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.5.0-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64"
},
"product_reference": "expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.aarch64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.i686",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.ppc64le",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.s390x",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.5.0-5.el9_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64"
},
"product_reference": "expat-devel-0:2.5.0-5.el9_6.x86_64",
"relates_to_product_reference": "BaseOS-9.6.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-05-13T14:13:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:7444"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src",
"AppStream-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x",
"AppStream-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.src",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debuginfo-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-debugsource-0:2.5.0-5.el9_6.x86_64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.aarch64",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.i686",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.ppc64le",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.s390x",
"BaseOS-9.6.0.Z.MAIN.EUS:expat-devel-0:2.5.0-5.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
RHSA-2025:7512
Vulnerability from csaf_redhat - Published: 2025-05-13 17:19 - Updated: 2026-06-02 15:21Summary
Red Hat Security Advisory: expat security update
Severity
Moderate
Notes
Topic: An update for expat is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Expat is a C library for parsing XML documents.
Security Fix(es):
* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.
7.5 (High)
Affected products
Fixed
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
10 references
Acknowledgments
Google Project Zero
Jann Horn
Red Hat
Tomas Korbar
Sandipan Roy
libexpat
Sebastian Pipping
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for expat is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2025:7512",
"url": "https://access.redhat.com/errata/RHSA-2025:7512"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7512.json"
}
],
"title": "Red Hat Security Advisory: expat security update",
"tracking": {
"current_release_date": "2026-06-02T15:21:34+00:00",
"generator": {
"date": "2026-06-02T15:21:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.1"
}
},
"id": "RHSA-2025:7512",
"initial_release_date": "2025-05-13T17:19:47+00:00",
"revision_history": [
{
"date": "2025-05-13T17:19:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-05-13T17:19:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-02T15:21:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.7.1-1.el10_0.src",
"product": {
"name": "expat-0:2.7.1-1.el10_0.src",
"product_id": "expat-0:2.7.1-1.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.7.1-1.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.7.1-1.el10_0.aarch64",
"product": {
"name": "expat-0:2.7.1-1.el10_0.aarch64",
"product_id": "expat-0:2.7.1-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.7.1-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"product": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"product_id": "expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.7.1-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"product": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"product_id": "expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.7.1-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.7.1-1.el10_0.aarch64",
"product": {
"name": "expat-devel-0:2.7.1-1.el10_0.aarch64",
"product_id": "expat-devel-0:2.7.1-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.7.1-1.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.7.1-1.el10_0.ppc64le",
"product": {
"name": "expat-0:2.7.1-1.el10_0.ppc64le",
"product_id": "expat-0:2.7.1-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.7.1-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"product": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"product_id": "expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.7.1-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"product": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"product_id": "expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.7.1-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.7.1-1.el10_0.ppc64le",
"product": {
"name": "expat-devel-0:2.7.1-1.el10_0.ppc64le",
"product_id": "expat-devel-0:2.7.1-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.7.1-1.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.7.1-1.el10_0.x86_64",
"product": {
"name": "expat-0:2.7.1-1.el10_0.x86_64",
"product_id": "expat-0:2.7.1-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.7.1-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"product": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"product_id": "expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.7.1-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"product": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"product_id": "expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.7.1-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.7.1-1.el10_0.x86_64",
"product": {
"name": "expat-devel-0:2.7.1-1.el10_0.x86_64",
"product_id": "expat-devel-0:2.7.1-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.7.1-1.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "expat-0:2.7.1-1.el10_0.s390x",
"product": {
"name": "expat-0:2.7.1-1.el10_0.s390x",
"product_id": "expat-0:2.7.1-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat@2.7.1-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-debugsource-0:2.7.1-1.el10_0.s390x",
"product": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.s390x",
"product_id": "expat-debugsource-0:2.7.1-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debugsource@2.7.1-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"product": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"product_id": "expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-debuginfo@2.7.1-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "expat-devel-0:2.7.1-1.el10_0.s390x",
"product": {
"name": "expat-devel-0:2.7.1-1.el10_0.s390x",
"product_id": "expat-devel-0:2.7.1-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/expat-devel@2.7.1-1.el10_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64"
},
"product_reference": "expat-0:2.7.1-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le"
},
"product_reference": "expat-0:2.7.1-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.s390x"
},
"product_reference": "expat-0:2.7.1-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.src"
},
"product_reference": "expat-0:2.7.1-1.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64"
},
"product_reference": "expat-0:2.7.1-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64"
},
"product_reference": "expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le"
},
"product_reference": "expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x"
},
"product_reference": "expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64"
},
"product_reference": "expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64"
},
"product_reference": "expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le"
},
"product_reference": "expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x"
},
"product_reference": "expat-debugsource-0:2.7.1-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64"
},
"product_reference": "expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.7.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64"
},
"product_reference": "expat-devel-0:2.7.1-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.7.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le"
},
"product_reference": "expat-devel-0:2.7.1-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.7.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x"
},
"product_reference": "expat-devel-0:2.7.1-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.7.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64"
},
"product_reference": "expat-devel-0:2.7.1-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64"
},
"product_reference": "expat-0:2.7.1-1.el10_0.aarch64",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le"
},
"product_reference": "expat-0:2.7.1-1.el10_0.ppc64le",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.s390x"
},
"product_reference": "expat-0:2.7.1-1.el10_0.s390x",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.src"
},
"product_reference": "expat-0:2.7.1-1.el10_0.src",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-0:2.7.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64"
},
"product_reference": "expat-0:2.7.1-1.el10_0.x86_64",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64"
},
"product_reference": "expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le"
},
"product_reference": "expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x"
},
"product_reference": "expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debuginfo-0:2.7.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64"
},
"product_reference": "expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64"
},
"product_reference": "expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le"
},
"product_reference": "expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x"
},
"product_reference": "expat-debugsource-0:2.7.1-1.el10_0.s390x",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-debugsource-0:2.7.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64"
},
"product_reference": "expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.7.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64"
},
"product_reference": "expat-devel-0:2.7.1-1.el10_0.aarch64",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.7.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le"
},
"product_reference": "expat-devel-0:2.7.1-1.el10_0.ppc64le",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.7.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x"
},
"product_reference": "expat-devel-0:2.7.1-1.el10_0.s390x",
"relates_to_product_reference": "BaseOS-10.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "expat-devel-0:2.7.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64"
},
"product_reference": "expat-devel-0:2.7.1-1.el10_0.x86_64",
"relates_to_product_reference": "BaseOS-10.0.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Jann Horn"
],
"organization": "Google Project Zero"
},
{
"names": [
"Tomas Korbar",
"Sandipan Roy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Sebastian Pipping"
],
"organization": "libexpat"
}
],
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-06-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310137"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All supported Red Hat offerings are built with the compilation flag (-fstack-clash-protection) which reduces the impact to Moderate. This build configuration blocks the possibility of an attacker gaining arbitrary code execution even if a stack-clash vulnerability, like this one, could be exploited.\n\nThis vulnerability is rated Moderate because Red Hat builds use the `-fstack-clash-protection` compiler flag, which mitigates the risk of arbitrary code execution from stack overflows. While the flaw allows a crash via uncontrolled recursion in XML parsing, the hardened stack layout prevents reliable memory corruption, limiting the impact to a Denial of Service (DoS) scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.src",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.src",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-8176"
},
{
"category": "external",
"summary": "RHBZ#2310137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310137"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8176"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/issues/893",
"url": "https://github.com/libexpat/libexpat/issues/893"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/973",
"url": "https://github.com/libexpat/libexpat/pull/973"
}
],
"release_date": "2025-03-13T13:51:54.957000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-05-13T17:19:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.src",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.src",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2025:7512"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.src",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.src",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.src",
"AppStream-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x",
"AppStream-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.src",
"BaseOS-10.0.Z:expat-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-debuginfo-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-debugsource-0:2.7.1-1.el10_0.x86_64",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.aarch64",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.ppc64le",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.s390x",
"BaseOS-10.0.Z:expat-devel-0:2.7.1-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…