A lightweight RPC library based on XML and HTTP
Go to file
Rob Crittenden 288e29745d Prevent integer overflow or wraparound CVE-2024-45491
An issue was discovered in libexpat before 2.6.3. dtdCopy in
xmlparse.c can have an integer overflow for nDefaultAtts on
32-bit platforms (where UINT_MAX equals SIZE_MAX).

Backported from upstream https://github.com/libexpat/libexpat/pull/891

Resolves: RHEL-57519
2024-09-20 10:04:54 -04:00
.gitignore expat: Address segementation fault in CVE-2023-52425 2024-04-25 10:47:50 -04:00
0001-add-meson-buildsystem-definitions.patch Auto sync2gitlab import of xmlrpc-c-1.51.0-5.el8.src.rpm 2022-05-26 16:18:32 -04:00
0001-Remove-trace-statements-accidentally-committed-with-.patch Auto sync2gitlab import of xmlrpc-c-1.51.0-5.el8.src.rpm 2022-05-26 16:18:32 -04:00
0001-xmlrpc_server_abyss-use-va_args-properly.patch Auto sync2gitlab import of xmlrpc-c-1.51.0-5.el8.src.rpm 2022-05-26 16:18:32 -04:00
0002-chmod-x-xml-rpc-api2txt.patch Auto sync2gitlab import of xmlrpc-c-1.51.0-5.el8.src.rpm 2022-05-26 16:18:32 -04:00
0002-Use-proper-datatypes-for-long-long.patch Auto sync2gitlab import of xmlrpc-c-1.51.0-5.el8.src.rpm 2022-05-26 16:18:32 -04:00
0003-allow-30x-redirections.patch Auto sync2gitlab import of xmlrpc-c-1.51.0-5.el8.src.rpm 2022-05-26 16:18:32 -04:00
0004-Add-missing-validation-of-encoding-CVE-2022-25235.patch Auto sync2gitlab import of xmlrpc-c-1.51.0-8.el8.src.rpm 2022-05-31 15:02:30 -04:00
0005-lib-Prevent-more-integer-overflows-CVE-2022-22822-to.patch Auto sync2gitlab import of xmlrpc-c-1.51.0-8.el8.src.rpm 2022-05-31 15:02:30 -04:00
0006-Prevent-integer-overflow-on-m_groupSize-in-doProlog-.patch Auto sync2gitlab import of xmlrpc-c-1.51.0-8.el8.src.rpm 2022-05-31 15:02:30 -04:00
0007-Address-segfault-found-in-CVE-2023-52425.patch expat: Address segementation fault in CVE-2023-52425 2024-04-25 10:47:50 -04:00
0008-Prevent-integer-overflow-or-wraparound-CVE-2024-4549.patch Prevent integer overflow or wraparound CVE-2024-45491 2024-09-20 10:04:54 -04:00
sources expat: Address segementation fault in CVE-2023-52425 2024-04-25 10:47:50 -04:00
xmlrpc-c.spec Prevent integer overflow or wraparound CVE-2024-45491 2024-09-20 10:04:54 -04:00