File _patchinfo of Package patchinfo.40884
<patchinfo incident="40884"> <issue tracker="cve" id="2025-59375"/> <issue tracker="bnc" id="1249584">VUL-0: CVE-2025-59375: expat: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.</issue> <packager>mschreiner</packager> <rating>important</rating> <category>security</category> <summary>Security update for expat</summary> <description>This update for expat fixes the following issues: - CVE-2025-59375: memory amplification vulnerability allows attackers to trigger excessive dynamic memory allocations by submitting crafted XML input (bsc#1249584). </description> </patchinfo>