SUSE-SU-2024%3A1129-2

SUSE-SU-2024%3A1129-2 PUBLISHED CVSS 8.699999809265137 HIGH

This update for expat fixes the following issues: - CVE-2023-52425: Fixed a DoS caused by processing large tokens. (bsc#1219559) - CVE-2024-28757: Fixed an XML Entity Expansion. (bsc#1221289)

Risk Scores

CVSS 4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
SUSE:Linux Enterprise Micro 5.5	expat	0, 0

Timeline

Apr 8, 2024 CVE Published
Feb 4, 2026 CVE Updated

References

https://www.suse.com/support/update/announcement/2024/suse-su-20241129-2/ advisory
https://bugzilla.suse.com/1219559 report
https://bugzilla.suse.com/1221289 report
https://www.suse.com/security/cve/CVE-2023-52425 url
https://www.suse.com/security/cve/CVE-2024-28757 url

Open in Interactive Console →