Resource exhaustion in expat - CVE-2023-52425

Vulnerability identifier: #VU86230

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-52425

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when parsing large tokens. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

expat
IBM Application Gateway
JBoss Core Services
IBM VIOS
AMQ Broker
IBM Business Automation Workflow
IBM Rational ClearCase
IBM Rational ClearQuest
Data Lakehouse
Consul
Consul Enterprise
Cryostat
IBM MQ Operator
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
Oracle Financial Services Behavior Detection Platform
WebSphere Remote Server
Oracle HTTP Server
Oracle Communications Network Analytics Data Director
Oracle Communications Cloud Native Core Automated Test Suite
Oracle Communications Cloud Native Core Binding Support Function
Run Once Duration Override Operator for Red Hat OpenShift
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
IBM Cloud Transformation Advisor
Red Hat OpenShift Dev Spaces
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Kube Descheduler Operator for Red Hat OpenShift
App Connect Enterprise Certified Container
IBM Tivoli Monitoring
Red Hat Migration Toolkit for Applications
IBM Power Hardware Management Console (HMC)
PowerProtect Data Manager
Cognos Dashboards on Cloud Pak for Data
Telemetry Dashboard
Storage Defender - Resiliency Service
Liquidware
SmartFabric OS10
Citrix Workspace App
Webex App VDI
PowerVault ME5
PowerStore X
OpenManage Network Integration (OMNI)
PowerStore T
Enterprise SONiC
IBM Cloud Pak for Watson AIOps
Storage Resource Manager
Security Verify Governance - Identity Manager virtual appliance
EMC Cloud Tiering Appliance
Integrated System for Microsoft Azure Stack Hub
Oracle Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Real Time 15
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Linux Micro
SUSE Enterprise Storage
IBM AIX
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Web and Scripting Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Workstation Extension 12
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Public Cloud Module
Basesystem Module
Python 3 Module
Development Tools Module
openSUSE Leap
openEuler
Ubuntu
Fedora
OpenShift API for Data Protection (OADP)
SmartFabric Storage Software
LANTIME Operating System Firmware (LTOS)
BIG-IP
PowerScale OneFS
Migration Toolkit for Containers
VMware Horizon Client
IBM Tivoli Network Manager (ITNM)
Red Hat OpenShift Container Platform
Red Hat OpenShift GitOps
OpenShift Service Mesh
OpenShift Virtualization
IBM Supplied MQ Advanced Queue Manager Container images
RecoverPoint for Virtual Machines
IBM Qradar SIEM
Oracle Outside In Technology
NetWorker Management Console
iDRAC9
MySQL Cluster
Juniper Secure Analytics (JSA)
Dell EMC NetWorker vProxy
Red Hat Single Sign-On
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
xmlrpc-c
xmlrpc-c-c++
xmlrpc-c-client++
xmlrpc-c-client
xmlrpc-c-devel
xmlrpc-c-doc
expat-debuginfo
libexpat1
libexpat1-32bit
expat-debuginfo-32bit
libexpat1-debuginfo-32bit
libexpat-devel
expat
libexpat1-debuginfo
expat-debugsource
expat (Red Hat package)
expat-devel
expat-help
libexpat-devel-32bit
expat-32bit-debuginfo
libexpat1-64bit-debuginfo
libexpat-devel-64bit
libexpat1-32bit-debuginfo
libexpat1-64bit
expat-64bit-debuginfo
libexpat1 (Ubuntu package)
expat (Ubuntu package)
expat-static
expat-doc
mingw-expat
python-curses-debuginfo
python
python-xml
python-xml-debuginfo
python-devel
python-base-debuginfo
python-base-debugsource
python-debugsource
libpython2_7-1_0
python-debuginfo
python-base
python-curses
python-gdbm
python-idle
python-tk
libpython2_7-1_0-debuginfo
python-base-debuginfo-32bit
libpython2_7-1_0-32bit
python-debuginfo-32bit
libpython2_7-1_0-debuginfo-32bit
python-32bit
python-tk-debuginfo
python-base-32bit
python-doc-pdf
python-doc
python-demo
python-gdbm-debuginfo
python3-debugsource
libpython3_4m1_0-32bit
python3-dbm-debuginfo
python3-devel
python3-dbm
python3-devel-debuginfo
python3-curses-debuginfo
python3-tk
python3-tk-debuginfo
python3-base-debuginfo
python3-base-debuginfo-32bit
libpython3_4m1_0-debuginfo-32bit
libpython3_4m1_0-debuginfo
python3
libpython3_4m1_0
python3-curses
python3-debuginfo
python3-base-debugsource
python3-base
python36-base
libpython3_6m1_0-debuginfo
python36-debugsource
python36-base-debuginfo
python36-debuginfo
libpython3_6m1_0
python36
libpython3_6m1_0-32bit
libpython3_6m1_0-debuginfo-32bit
python36-devel
python3-tools
python3-idle
python3-core-debugsource
python3-doc-devhelp
python3-testsuite
python3-testsuite-debuginfo
libpython3_6m1_0-64bit-debuginfo
libpython3_6m1_0-64bit
libpython3_6m1_0-32bit-debuginfo
python3-doc
libpython3_10-1_0-debuginfo
python310-devel
python310-debugsource
python310-dbm
python310-tools
python310-idle
python310-tk
python310-base
python310-curses-debuginfo
libpython3_10-1_0-64bit
python310-64bit
libpython3_10-1_0-64bit-debuginfo
python310-64bit-debuginfo
python310-base-64bit-debuginfo
python310-base-64bit
python310-base-32bit-debuginfo
python310-base-32bit
python310-32bit
libpython3_10-1_0-32bit
libpython3_10-1_0-32bit-debuginfo
python310-32bit-debuginfo
python310-core-debugsource
python310
python310-doc
python310-testsuite
libpython3_10-1_0
python310-dbm-debuginfo
python310-testsuite-debuginfo
python310-base-debuginfo
python310-doc-devhelp
python310-curses
python310-debuginfo
python310-tk-debuginfo
python311-base-64bit-debuginfo
python311-64bit
libpython3_11-1_0-64bit
libpython3_11-1_0-64bit-debuginfo
python311-base-64bit
python311-base-32bit-debuginfo
python311-dbm
python311-testsuite
python311-doc
python311-debugsource
python311-doc-devhelp
python311-devel
python311-core-debugsource
python311-testsuite-debuginfo
python311-base-debuginfo
libpython3_11-1_0-debuginfo
python311-curses-debuginfo
libpython3_11-1_0
python311-debuginfo
libpython3_11-1_0-32bit
python311-tk
python311-idle
python311
python311-tools
python311-dbm-debuginfo
python311-tk-debuginfo
python311-curses
python311-base
libpython3_11-1_0-32bit-debuginfo
python311-base-32bit
python311-32bit-debuginfo
python311-32bit
python311-64bit-debuginfo
Cisco Jabber
BIG-IP DNS
Dell EMC VxRail Appliance
Oracle Communications Cloud Native Core Service Communication Proxy
Oracle Communications Cloud Native Core Policy
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Cisco Webex Meetings
HPE NonStop Virtual Tape Repository (VTR)
Dell EMC Storage Monitoring and Reporting (SMR)
IBM FileNet Content Manager
IBM HTTP Server

Install updates from vendor's website.

expat - update to 2.6.0
Data Lakehouse - update to 1.1.0.0
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
OpenShift API for Data Protection (OADP) - update to 1.3.1
SmartFabric Storage Software - update to 1.4.3
Migration Toolkit for Containers - update to 1.7.15
Red Hat OpenShift GitOps - addressed in versions 1.10.4, 1.10.6, 1.11.3, 1.12.1, 1.12.4
Consul - addressed in versions 1.16.7, 1.17.4
Consul Enterprise - update to 1.18.1
Storage Defender - Resiliency Service - update to 2.0.11
IBM MQ Operator - addressed in versions 2.0.21, 3.1.2
JBoss Core Services - update to 2.4.62
OpenShift Service Mesh - update to 2.5.1
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
iDRAC9 - addressed in versions 7.00.00.184, 7.30.30.51
LANTIME Operating System Firmware (LTOS) - update to 7.08.010
IBM Qradar SIEM - addressed in versions 7.5.0 Update Pack 8 IF02, 7.5.0 Update Pack 9 IF01
Juniper Secure Analytics (JSA) - addressed in versions 7.5.0 UP8 IF03, 7.5.0 UP9 IF02
Red Hat Single Sign-On - update to 7.6.8
MySQL Cluster - update to 8.4.0
SmartFabric OS10 - update to 10.5.4.11
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
HPE NonStop Virtual Tape Repository (VTR) - update to T09644V01^AAK
Run Once Duration Override Operator for Red Hat OpenShift - addressed in versions 1.1.2, 1.2.0
PowerVault ME5 - update to 1.2.1.0
xmlrpc-c - update to 1.51.0-9.0.1
xmlrpc-c-c++ - update to 1.51.0-9.0.1
xmlrpc-c-client++ - update to 1.51.0-9.0.1
xmlrpc-c-client - update to 1.51.0-9.0.1
xmlrpc-c-devel - update to 1.51.0-9.0.1
xmlrpc-c-doc - update to 1.51.0-9.0.1
expat-debuginfo - addressed in versions 2.1.0-21.32.1, 2.4.4-150400.3.17.1
libexpat1 - addressed in versions 2.1.0-21.32.1, 2.4.4-150400.3.17.1
libexpat1-32bit - addressed in versions 2.1.0-21.32.1, 2.4.4-150400.3.17.1
expat-debuginfo-32bit - update to 2.1.0-21.32.1
libexpat1-debuginfo-32bit - update to 2.1.0-21.32.1
libexpat-devel - addressed in versions 2.1.0-21.32.1, 2.4.4-150400.3.17.1
expat - addressed in versions 2.1.0-21.32.1, 2.4.4-150400.3.17.1
libexpat1-debuginfo - addressed in versions 2.1.0-21.32.1, 2.4.4-150400.3.17.1
expat-debugsource - addressed in versions 2.1.0-21.32.1, 2.4.4-150400.3.17.1
expat (Red Hat package) - addressed in versions 2.2.5-8.el8_6.5, 2.2.5-11.el8_8.2, 2.2.5-11.el8_9.1, 2.2.10-1.el8_4, 2.2.10-12.el9_0.4, 2.5.0-1.el9_2.1, 2.5.0-1.el9_3.1
expat - addressed in versions 2.2.5-13, 2.5.0-3
expat-devel - addressed in versions 2.2.5-13, 2.5.0-3
expat - update to 2.2.9-12
expat-debuginfo - update to 2.2.9-12
expat-debugsource - update to 2.2.9-12
expat-devel - update to 2.2.9-12
expat-help - update to 2.2.9-12
Ansible Automation Platform - update to 2.4
libexpat-devel-32bit - update to 2.4.4-150400.3.17.1
expat-32bit-debuginfo - update to 2.4.4-150400.3.17.1
libexpat1-64bit-debuginfo - update to 2.4.4-150400.3.17.1
libexpat-devel-64bit - update to 2.4.4-150400.3.17.1
libexpat1-32bit-debuginfo - update to 2.4.4-150400.3.17.1
libexpat1-64bit - update to 2.4.4-150400.3.17.1
expat-64bit-debuginfo - update to 2.4.4-150400.3.17.1
libexpat1 (Ubuntu package) - addressed in versions 2.4.7-1ubuntu0.3, 2.5.0-2ubuntu0.1
expat (Ubuntu package) - addressed in versions 2.4.7-1ubuntu0.3, 2.5.0-2ubuntu0.1
expat-static - update to 2.5.0-3
expat-doc - update to 2.5.0-3
expat - update to 2.6.0
mingw-expat - addressed in versions 2.6.0-1.fc38, 2.6.0-1.fc39
expat - addressed in versions 2.6.0-1.fc38, 2.6.0-1.fc39
python-curses-debuginfo - update to 2.7.18-33.32.1
python - update to 2.7.18-33.32.1
python-xml - update to 2.7.18-33.32.1
python-xml-debuginfo - update to 2.7.18-33.32.1
python-devel - update to 2.7.18-33.32.1
python-base-debuginfo - update to 2.7.18-33.32.1
python-base-debugsource - update to 2.7.18-33.32.1
python-debugsource - update to 2.7.18-33.32.1
libpython2_7-1_0 - update to 2.7.18-33.32.1
python-debuginfo - update to 2.7.18-33.32.1
python-base - update to 2.7.18-33.32.1
python-curses - update to 2.7.18-33.32.1
python-gdbm - update to 2.7.18-33.32.1
python-idle - update to 2.7.18-33.32.1
python-tk - update to 2.7.18-33.32.1
libpython2_7-1_0-debuginfo - update to 2.7.18-33.32.1
python-base-debuginfo-32bit - update to 2.7.18-33.32.1
libpython2_7-1_0-32bit - update to 2.7.18-33.32.1
python-debuginfo-32bit - update to 2.7.18-33.32.1
libpython2_7-1_0-debuginfo-32bit - update to 2.7.18-33.32.1
python-32bit - update to 2.7.18-33.32.1
python-tk-debuginfo - update to 2.7.18-33.32.1
python-base-32bit - update to 2.7.18-33.32.1
python-doc-pdf - update to 2.7.18-33.32.1
python-doc - update to 2.7.18-33.32.1
python-demo - update to 2.7.18-33.32.1
python-gdbm-debuginfo - update to 2.7.18-33.32.1
Red Hat Advanced Cluster Management for Kubernetes - update to 2.10.4
PowerStore X - update to 3.2.1.4-2386214
python3-debugsource - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
libpython3_4m1_0-32bit - update to 3.4.10-25.127.1
python3-dbm-debuginfo - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-devel - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-dbm - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-devel-debuginfo - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-curses-debuginfo - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-tk - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-tk-debuginfo - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-base-debuginfo - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-base-debuginfo-32bit - update to 3.4.10-25.127.1
libpython3_4m1_0-debuginfo-32bit - update to 3.4.10-25.127.1
libpython3_4m1_0-debuginfo - update to 3.4.10-25.127.1
python3 - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
libpython3_4m1_0 - update to 3.4.10-25.127.1
python3-curses - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-debuginfo - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-base-debugsource - update to 3.4.10-25.127.1
python3-base - addressed in versions 3.4.10-25.127.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python36-base - update to 3.6.15-55.1
libpython3_6m1_0-debuginfo - addressed in versions 3.6.15-55.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python36-debugsource - update to 3.6.15-55.1
python36-base-debuginfo - update to 3.6.15-55.1
python36-debuginfo - update to 3.6.15-55.1
libpython3_6m1_0 - addressed in versions 3.6.15-55.1, 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python36 - update to 3.6.15-55.1
libpython3_6m1_0-32bit - addressed in versions 3.6.15-55.1, 3.6.15-150300.10.65.1
libpython3_6m1_0-debuginfo-32bit - update to 3.6.15-55.1
python36-devel - update to 3.6.15-55.1
python3-tools - addressed in versions 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-idle - addressed in versions 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.2
python3-core-debugsource - addressed in versions 3.6.15-150000.3.147.1, 3.6.15-150300.10.65.1
python3-doc-devhelp - update to 3.6.15-150300.10.65.1
python3-testsuite - update to 3.6.15-150300.10.65.1
python3-testsuite-debuginfo - update to 3.6.15-150300.10.65.1
libpython3_6m1_0-64bit-debuginfo - update to 3.6.15-150300.10.65.1
libpython3_6m1_0-64bit - update to 3.6.15-150300.10.65.1
libpython3_6m1_0-32bit-debuginfo - update to 3.6.15-150300.10.65.1
python3-doc - update to 3.6.15-150300.10.65.1
OpenManage Network Integration (OMNI) - update to 3.7
python3 - update to 3.9.19
IBM Cloud Transformation Advisor - update to 3.10.0
libpython3_10-1_0-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-devel - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-debugsource - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-dbm - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-tools - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-idle - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-tk - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-base - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-curses-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
libpython3_10-1_0-64bit - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-64bit - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
libpython3_10-1_0-64bit-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-64bit-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-base-64bit-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-base-64bit - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-base-32bit-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-base-32bit - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-32bit - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
libpython3_10-1_0-32bit - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
libpython3_10-1_0-32bit-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-32bit-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-core-debugsource - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310 - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-doc - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-testsuite - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
libpython3_10-1_0 - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-dbm-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-testsuite-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-base-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-doc-devhelp - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-curses - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python310-tk-debuginfo - addressed in versions 3.10.14-150400.4.45.1, 3.10.14-150400.4.48.1
python311-base-64bit-debuginfo - update to 3.11.9-150400.9.26.1
python311-64bit - update to 3.11.9-150400.9.26.1
libpython3_11-1_0-64bit - update to 3.11.9-150400.9.26.1
libpython3_11-1_0-64bit-debuginfo - update to 3.11.9-150400.9.26.1
python311-base-64bit - update to 3.11.9-150400.9.26.1
python311-base-32bit-debuginfo - update to 3.11.9-150400.9.26.1
python311-dbm - update to 3.11.9-150400.9.26.1
python311-testsuite - update to 3.11.9-150400.9.26.1
python311-doc - update to 3.11.9-150400.9.26.1
python311-debugsource - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-doc-devhelp - update to 3.11.9-150400.9.26.1
python311-devel - update to 3.11.9-150400.9.26.1
python311-core-debugsource - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-testsuite-debuginfo - update to 3.11.9-150400.9.26.1
python311-base-debuginfo - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
libpython3_11-1_0-debuginfo - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-curses-debuginfo - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
libpython3_11-1_0 - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-debuginfo - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
libpython3_11-1_0-32bit - update to 3.11.9-150400.9.26.1
python311-tk - update to 3.11.9-150400.9.26.1
python311-idle - update to 3.11.9-150400.9.26.1
python311 - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-tools - update to 3.11.9-150400.9.26.1
python311-dbm-debuginfo - update to 3.11.9-150400.9.26.1
python311-tk-debuginfo - update to 3.11.9-150400.9.26.1
python311-curses - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
python311-base - addressed in versions 3.11.9-150400.9.26.1, 3.11.12-slfo.1.1_1.1
libpython3_11-1_0-32bit-debuginfo - update to 3.11.9-150400.9.26.1
python311-base-32bit - update to 3.11.9-150400.9.26.1
python311-32bit-debuginfo - update to 3.11.9-150400.9.26.1
python311-32bit - update to 3.11.9-150400.9.26.1
python311-64bit-debuginfo - update to 3.11.9-150400.9.26.1
Red Hat OpenShift Dev Spaces - update to 3.15.0
PowerStore T - update to 4.0.0.2-2365061
IBM Tivoli Network Manager (ITNM) - update to 4.2.0.19
Enterprise SONiC - update to 4.4.1
IBM Cloud Pak for Watson AIOps - update to 4.6.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.5
Red Hat OpenShift Container Platform - addressed in versions 4.12.58, 4.12.60, 4.13.42, 4.13.45, 4.14.26, 4.14.31, 4.15.14, 4.15.19, 4.16.0, 4.16.1
OpenShift Virtualization - update to 4.14.6
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Storage Resource Manager - update to 5.0.1.0
Kube Descheduler Operator for Red Hat OpenShift - addressed in versions 5.0.2, 5.1.0
App Connect Enterprise Certified Container - addressed in versions 5.0.17, 11.5.0
IBM FileNet Content Manager - addressed in versions 5.5.8.0 IF009, 5.5.12.0 IF004, 5.6.0.0 IF002
IBM Tivoli Monitoring - update to 6.3.0.7 Plus Service Pack 5
Red Hat Migration Toolkit for Applications - update to 7.0.3
AMQ Broker - update to 7.12.0
Dell EMC VxRail Appliance - update to 8.0.212
IBM HTTP Server - addressed in versions 8.5.5.26, 9.0.5.19
IBM Supplied MQ Advanced Queue Manager Container images - addressed in versions 9.3.0.17-r1, 9.3.5.1-r1
PowerScale OneFS - addressed in versions 9.4.0.19, 9.5.1.0, 9.5.1.1, 9.7.1.2, 9.9.0.0
Security Verify Governance - Identity Manager virtual appliance - update to 10.0.2.0.4
IBM Power Hardware Management Console (HMC) - addressed in versions 10.2.1040.0 SP2, 10.3.1060.0
EMC Cloud Tiering Appliance - update to 13.2.0.2.31
Dell EMC NetWorker vProxy - addressed in versions 19.11.0.5, 19.12.0.1
NetWorker Management Console - update to 19.12.0.1
PowerProtect Data Manager - update to 19.19.0-15
Integrated System for Microsoft Azure Stack Hub - update to 2606

• https://github.com/libexpat/libexpat/pull/789

• Multiple vulnerabilities in libexpat
• Slackware Linux update for expat
• Fedora 39 update for expat
• Fedora 38 update for expat
• Fedora 38 update for mingw-expat
• Fedora 39 update for mingw-expat
• Resource exhaustion in IBM HTTP Server
• Ubuntu update for expat
• Resource exhaustion in IBM WebSphere Remote Server
• Slackware Linux update for python3
• Multiple vulnerabilities in IBM Tivoli Network Manager
• Red Hat Enterprise Linux 9 update for expat
• Multiple vulnerabilities in Consul
• Resource exhaustion in IBM Business Automation Workflow
• Multiple vulnerabilities in HashiCorp Consul
• Red Hat Enterprise Linux 8 update for expat
• SUSE update for expat
• SUSE update for python310
• Resource exhaustion in IBM Rational ClearQuest
• Multiple vulnerabilities in IBM AIX and IBM VIOS
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh Containers 2.5
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.10
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in Red Hat build of Cryostat 2 on RHEL 8
• Red Hat Enterprise Linux 8 update for expat
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in Red Hat Ceph Storage 6.1
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• SUSE update for python311
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• SUSE update for python3
• SUSE update for python
• SUSE update for python310
• SUSE update for python3
• SUSE update for python36
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Red Hat Enterprise Linux 8.6 Extended Update Support update for expat
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Red Hat Enterprise Linux 9.2 Extended Update Support update for expat
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in AMQ Broker 7.12
• Multiple vulnerabilities in Dell ThinOS
• Multiple vulnerabilities in OpenShift Virtualization 4.14
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• openEuler update for expat
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in IBM Cognos Dashboards on Cloud Pak for Data
• Multiple vulnerabilities in IBM Tivoli Monitoring
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Resource exhaustion in IBM Rational ClearCase
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Oracle Communications Network Analytics Data Director
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Service Communication Proxy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Security Edge Protection Proxy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Automated Test Suite
• Multiple vulnerabilities in Oracle Outside In Technology
• Multiple vulnerabilities in Oracle HTTP Server
• Multiple vulnerabilities in Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
• Multiple vulnerabilities in Oracle Financial Services Behavior Detection Platform
• Multiple vulnerabilities in MySQL Cluster
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in Dell SmartFabric OS10
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in Dell PowerVault ME5
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• SUSE update for python3
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• SUSE update for expat
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Resource exhaustion in IBM Power HMC.
• Multiple vulnerabilities in HPE NonStop Vrtual Tape Repository (VTR)
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift 1.2
• Multiple vulnerabilities in Kube Descheduler Operator for Red Hat OpenShift 5.1
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift 1.1
• Denial of service in F5 BIG-IP iControl (libexpat)
• Multiple vulnerabilities in Dell PowerStore X
• Multiple vulnerabilities in Kube Descheduler Operator for Red Hat OpenShift 5.0
• Multiple vulnerabilities in Enterprise SONiC Distribution
• Multiple vulnerabilities in Dell PowerStore T Family
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell PowerScale OneFS
• Multiple vulnerabilities in IBM Storage Defender - Resiliency Service
• Multiple vulnerabilities in IBM FileNet Content Manager
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager virtual appliance
• Anolis OS update for expat
• Anolis OS update for xmlrpc-c
• Anolis OS update for expat
• Dell SmartFabric Storage Software update for third-party components
• Multiple vulnerabilities in Red Hat JBoss Core Services Apache HTTP Server
• Dell EMC NetWorker vProxy update for third-party components
• Multiple vulnerabilities in Dell PowerProtect Data Manager
• Meinberg LANTIME firmware update for third-party components (April 2024)
• Dell RecoverPoint for Virtual Machines update for third-party components
• Dell NetWorker Management Console update for third-party components
• SUSE update for python311
• Multiple vulnerabilities in IBM Application Gateway
• Red Hat Enterprise Linux 9 update for expat
• Red Hat Enterprise Linux 8 update for expat
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 7.0
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.10
• Multiple vulnerabilities in Dell iDRAC9
• Multiple vulnerabilities in Dell Integrated System for Microsoft Azure Stack Hub 14G and 16G