{
  "cveId": "CVE-2023-52425",
  "url": "https://patchblox.com/security/cve/CVE-2023-52425",
  "summary": "CVE-2023-52425 is fixed in 27 products on 1 platform, first by expat 2.6.0-1, released February 4, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "expat: This update for expat fixes the following issues:\n  \n- CVE-2025-59375: denial of service (resource consumption) cause...",
  "description": "This update for expat fixes the following issues:\n  \n- CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584).\n- CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the\n  encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144).\n- CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496).\n- CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity\n  declaration value (bsc#1259726).\n- CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711).\n- CVE-2026-32778: NULL pointer dereference in \u0060setContext\u0060 on retry after an out-of-memory condition\n  (bsc#1259729).\n- CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263).\n- CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713).\n- CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a\n  policy violation (bsc#1267631).\n- CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within\n  handlers in cases of a policy violation (bsc#1268572).\n- CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573).\n- CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406,\n  CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410,\n  CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115).\n- CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts()\n  function (bsc#1275732).\n- CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same\n  as high surrogates during Unicode processing (bsc#1275594).\n- CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger\n  memory corruption (bsc#1275915).\n- CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860).\n- CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use-\n  after-free can occur (bsc#1275859).\n- CVE-2026-77214: out-of-bounds read due to insufficient checks in \u0060XML_ParseBuffer()\u0060 (bsc#1284334).\n- CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347).\n- CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493).\n\nUpdate to 2.8.5 (jsc#PED-16154):\n\t\n * Bug fixes:\n * Fix an OOM-related memory leak on a failed overflow check\n * Fix memory alignment for architectures with 128bit pointers\n * Mark XML_SetHashSalt deprecated\n * CMake: only add /source-charset:utf-8 when /utf-8 is not present\n * lib: resolve undefined behavior from overshifting a signed int\n * lib: support read-only hash table lookup with non-zero-terminated\n keys\n * lib: use a C99 bool for ENTITY.open\n * version info bumped from 13:3:12 to 13:4:12\n * fix support for 2\u002B GiB documents (regression from 2.8.2)\n * reject empty version in the XML declaration\n * fix printf format for AIX\n * CMake|AIX: enable EXPAT_DEV_URANDOM by default\n * version info bumped from 13:2:12 to 13:3:12\n * Existing API function XML_SetHashSalt is now deprecated\n * because of its limitations, and its use should be\n * considered a vulnerability. Please either use the new API\n * function XML_SetHashSalt16Bytes (with known-high-quality\n * entropy input only!) instead, or leave the derivation of\n * a 16-bytes hash salt from high quality entropy to Expat\u0027s\n * internal machinery (by *not* calling either of the two\n * XML_SetHashSalt* functions).\n * xmlwf: Fix a memory leak\n * WASI: Fix format specifiers for 32bit WASI SDK\n * Fix alignment of internal allocations for some non-amd64\n architectures (e.g. sparc32); fixes up on the fix to\n CVE-2025-59375 (of Expat 2.7.2)\n * Fix a class of false positives where input should have been\n rejected with error XML_ERROR_ASYNC_ENTITY; regression from\n CVE-2024-8176 (of Expat 2.7.0)\n * Prove and regression-proof absence of integer overflow\n from function expat_realloc\n * Remove \u0027harmless\u0027 cast that truncated a size_t to unsigned\n * xmlwf: Resolve use of functions XML_GetErrorLineNumber\n and XML_GetErrorColumnNumber\n * CVE-2025-59375 -- Disallow use of disproportional amounts of\n dynamic memory from within an Expat parser\n * xmlwf: Fix (internal) help generator\n * xmlwf: Mention supported environment variables in",
  "published": "2024-02-04T12:15:00Z",
  "severity": "Medium",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.02149,
  "epssPercentile": 0.8224,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "expat",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "2.2.10-2\u002Bdeb11u6",
      "fix": "DLA-3893-1",
      "url": "https://patchblox.com/security/fix/linux/dla-3893-1",
      "released": "2024-09-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2.5.0-1\u002Bdeb12u2",
      "fix": "DEBIAN-CVE-2023-52425",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52425",
      "released": "2024-02-04T20:15:46Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.6.0-1",
      "fix": "DEBIAN-CVE-2023-52425",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52425",
      "released": "2024-02-04T20:15:46Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "Debian 14",
      "fixedVersion": "2.6.0-1",
      "fix": "DEBIAN-CVE-2023-52425",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52425",
      "released": "2024-02-04T20:15:46Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "RHEL 8",
      "fixedVersion": "0:2.2.5-11.el8_9.1",
      "fix": "RHSA-2024:1615",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-1615",
      "released": "2024-04-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "RHEL 9",
      "fixedVersion": "0:2.5.0-1.el9_3.1",
      "fix": "RHSA-2024:1530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-1530",
      "released": "2024-03-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.4.7-1ubuntu0.3",
      "fix": "expat 2.4.7-1ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-expat-2.4.7-1ubuntu0.3",
      "released": "2024-03-09T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.6.0-1",
      "fix": "expat 2.6.0-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-expat-2.6.0-1",
      "released": "2024-02-04T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2.6.0-1",
      "fix": "expat 2.6.0-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-expat-2.6.0-1",
      "released": "2026-01-16T01:42:23Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.6.0-1",
      "fix": "expat 2.6.0-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-expat-2.6.0-1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "almalinux 8",
      "fixedVersion": "2.2.5-11.el8_9.1",
      "fix": "ALSA-2024:1615",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-1615",
      "released": "2024-04-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "almalinux 9",
      "fixedVersion": "2.5.0-1.el9_3.1",
      "fix": "ALSA-2024:1530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-1530",
      "released": "2024-03-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "amzn 2023",
      "fixedVersion": "2.6.3-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-759",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-759",
      "released": "2024-11-13T12:28:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "ol 8",
      "fixedVersion": "0:2.2.5-11.0.1.el8_9.1",
      "fix": "ELSA-2024-1615",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-1615",
      "released": "2024-04-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "ol 9",
      "fixedVersion": "0:2.5.0-1.el9_3.1",
      "fix": "ELSA-2024-1530",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-1530",
      "released": "2024-03-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "rocky 8",
      "fixedVersion": "0:2.2.5-11.el8_9.1",
      "fix": "RLSA-2024:1615",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-1615",
      "released": "2024-04-05T14:55:53Z"
    },
    {
      "platform": "linux",
      "product": "expat",
      "release": "sles 15.6",
      "fixedVersion": "2.8.5-150400.3.40.1",
      "fix": "SUSE-SU-2026:4623-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4623-1",
      "released": "2026-11-07T00:41:11Z"
    },
    {
      "platform": "linux",
      "product": "expat-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2.6.3-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-759",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-759",
      "released": "2024-11-13T12:28:00Z"
    },
    {
      "platform": "linux",
      "product": "expat-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "2.6.3-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-759",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-759",
      "released": "2024-11-13T12:28:00Z"
    },
    {
      "platform": "linux",
      "product": "expat-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:2.2.5-11.el8_9.1",
      "fix": "RHSA-2024:1615",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-1615",
      "released": "2024-04-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat-devel",
      "release": "RHEL 9",
      "fixedVersion": "0:2.5.0-1.el9_3.1",
      "fix": "RHSA-2024:1530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-1530",
      "released": "2024-03-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat-devel",
      "release": "almalinux 8",
      "fixedVersion": "2.2.5-11.el8_9.1",
      "fix": "ALSA-2024:1615",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-1615",
      "released": "2024-04-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat-devel",
      "release": "almalinux 9",
      "fixedVersion": "2.5.0-1.el9_3.1",
      "fix": "ALSA-2024:1530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-1530",
      "released": "2024-03-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat-devel",
      "release": "amzn 2023",
      "fixedVersion": "2.6.3-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-759",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-759",
      "released": "2024-11-13T12:28:00Z"
    },
    {
      "platform": "linux",
      "product": "expat-devel",
      "release": "ol 8",
      "fixedVersion": "0:2.2.5-11.0.1.el8_9.1",
      "fix": "ELSA-2024-1615",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-1615",
      "released": "2024-04-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat-devel",
      "release": "ol 9",
      "fixedVersion": "0:2.5.0-1.el9_3.1",
      "fix": "ELSA-2024-1530",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-1530",
      "released": "2024-03-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "expat-static",
      "release": "amzn 2023",
      "fixedVersion": "2.6.3-1.amzn2023.0.1",
      "fix": "ALAS2023-2024-759",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2024-759",
      "released": "2024-11-13T12:28:00Z"
    },
    {
      "platform": "linux",
      "product": "libexpat1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.4.7-1ubuntu0.3",
      "fix": "libexpat1 2.4.7-1ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libexpat1-2.4.7-1ubuntu0.3",
      "released": "2024-03-09T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libexpat1",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.6.0-1",
      "fix": "libexpat1 2.6.0-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libexpat1-2.6.0-1",
      "released": "2024-02-04T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libexpat1",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2.6.0-1",
      "fix": "libexpat1 2.6.0-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libexpat1-2.6.0-1",
      "released": "2026-01-16T01:42:23Z"
    },
    {
      "platform": "linux",
      "product": "libexpat1",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.6.0-1",
      "fix": "libexpat1 2.6.0-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libexpat1-2.6.0-1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "python",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.7.18-150000.65.1",
      "fix": "SUSE-SU-2024:1862-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-1862-1",
      "released": "2024-05-30T12:17:41Z"
    },
    {
      "platform": "linux",
      "product": "python",
      "release": "sles 15.6",
      "fixedVersion": "2.7.18-150000.65.1",
      "fix": "SUSE-SU-2024:1862-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-1862-1",
      "released": "2024-05-30T12:17:41Z"
    },
    {
      "platform": "linux",
      "product": "python-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.7.18-150000.65.1",
      "fix": "SUSE-SU-2024:1862-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-1862-1",
      "released": "2024-05-30T12:17:41Z"
    },
    {
      "platform": "linux",
      "product": "python-base",
      "release": "sles 15.6",
      "fixedVersion": "2.7.18-150000.65.1",
      "fix": "SUSE-SU-2024:1862-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-1862-1",
      "released": "2024-05-30T12:17:41Z"
    },
    {
      "platform": "linux",
      "product": "python-doc",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.7.18-150000.65.1",
      "fix": "SUSE-SU-2024:1862-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-1862-1",
      "released": "2024-05-30T12:17:41Z"
    },
    {
      "platform": "linux",
      "product": "python3",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "3.6.15-150300.10.65.2",
      "fix": "SUSE-SU-2024:2479-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2479-1",
      "released": "2024-07-15T08:34:13Z"
    },
    {
      "platform": "linux",
      "product": "python3",
      "release": "sles 15.6",
      "fixedVersion": "3.6.15-150300.10.65.2",
      "fix": "SUSE-SU-2024:2479-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2479-1",
      "released": "2024-07-15T08:34:13Z"
    },
    {
      "platform": "linux",
      "product": "python3-core",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "3.6.15-150300.10.65.1",
      "fix": "SUSE-SU-2024:2479-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2479-1",
      "released": "2024-07-15T08:34:13Z"
    },
    {
      "platform": "linux",
      "product": "python3-core",
      "release": "sles 15.6",
      "fixedVersion": "3.6.15-150300.10.65.1",
      "fix": "SUSE-SU-2024:2479-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2479-1",
      "released": "2024-07-15T08:34:13Z"
    },
    {
      "platform": "linux",
      "product": "python3-documentation",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "3.6.15-150300.10.65.1",
      "fix": "SUSE-SU-2024:2479-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2479-1",
      "released": "2024-07-15T08:34:13Z"
    },
    {
      "platform": "linux",
      "product": "python310",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "3.10.14-150400.4.48.1",
      "fix": "SUSE-SU-2024:1698-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-1698-1",
      "released": "2024-05-20T18:08:03Z"
    },
    {
      "platform": "linux",
      "product": "python310-core",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "3.10.14-150400.4.48.1",
      "fix": "SUSE-SU-2024:1698-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-1698-1",
      "released": "2024-05-20T18:08:03Z"
    },
    {
      "platform": "linux",
      "product": "python310-documentation",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "3.10.14-150400.4.48.1",
      "fix": "SUSE-SU-2024:1698-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-1698-1",
      "released": "2024-05-20T18:08:03Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c",
      "release": "RHEL 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "RHSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c",
      "release": "almalinux 8",
      "fixedVersion": "1.51.0-9.el8_10",
      "fix": "ALSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c",
      "release": "ol 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "ELSA-2024-4259",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c",
      "release": "rocky 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "RLSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2024-4259",
      "released": "2025-05-07T19:11:34Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-apps",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-apps-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-c\u002B\u002B",
      "release": "RHEL 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "RHSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-c\u002B\u002B",
      "release": "almalinux 8",
      "fixedVersion": "1.51.0-9.el8_10",
      "fix": "ALSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-c\u002B\u002B",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-c\u002B\u002B",
      "release": "ol 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "ELSA-2024-4259",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-c\u002B\u002B-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client",
      "release": "RHEL 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "RHSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client",
      "release": "almalinux 8",
      "fixedVersion": "1.51.0-9.el8_10",
      "fix": "ALSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client",
      "release": "ol 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "ELSA-2024-4259",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client\u002B\u002B",
      "release": "RHEL 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "RHSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client\u002B\u002B",
      "release": "almalinux 8",
      "fixedVersion": "1.51.0-9.el8_10",
      "fix": "ALSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client\u002B\u002B",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client\u002B\u002B",
      "release": "ol 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "ELSA-2024-4259",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client\u002B\u002B-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-client-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "RHSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-devel",
      "release": "almalinux 8",
      "fixedVersion": "1.51.0-9.el8_10",
      "fix": "ALSA-2024:4259",
      "url": "https://patchblox.com/security/fix/linux/alsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-devel",
      "release": "amzn 2023",
      "fixedVersion": "1.51.08-2.amzn2023.0.2",
      "fix": "ALAS2023-2025-1229",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1229",
      "released": "2025-10-27T14:26:00Z"
    },
    {
      "platform": "linux",
      "product": "xmlrpc-c-devel",
      "release": "ol 8",
      "fixedVersion": "0:1.51.0-9.el8_10",
      "fix": "ELSA-2024-4259",
      "url": "https://patchblox.com/security/fix/linux/elsa-2024-4259",
      "released": "2024-07-02T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}