CVE catalog
CVE-2023-52425
libxmltok: CVE-2023-52425
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 2.15% · Oct 25, 2026
libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | expat | sid | 2.9.0-1 | fixed |
| Debian | expat | forky | 2.9.0-1 | fixed |
| Debian | expat | trixie | 2.8.3-1~deb13u1 | fixed |
| Debian | expat | trixie-security | 2.9.0-1~deb13u1 | fixed |
| Debian | expat | bookworm | 2.5.0-1+deb12u2 | fixed |
| Debian | expat | bookworm-security | 2.5.0-1+deb12u5 | fixed |
| Debian | libxmltok | bookworm | 1.2-4 | vulnerable |
| Cpe | libexpat | Not reported | Not reported | unknown |
| Alpine | expat | 3.16 | 2.6.0-r0 | fixed |
| Alpine | expat | 3.17 | 2.6.0-r0 | fixed |
| Alpine | expat | 3.18 | 2.6.0-r0 | fixed |
| Alpine | expat | 3.19 | 2.6.0-r0 | fixed |
| Alpine | expat | 3.20 | 2.6.0-r0 | fixed |
| Alpine | expat | 3.21 | 2.6.0-r0 | fixed |
| Alpine | expat | 3.22 | 2.6.0-r0 | fixed |
| Alpine | expat | 3.23 | 2.6.0-r0 | fixed |
| Alpine | expat | 3.24 | 2.6.0-r0 | fixed |
| Ubuntu | expat | 22.04 | 2.4.1-2 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.1-3 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.2-1 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.3-1 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.3-2 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.4-1 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.6-1 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.7-1 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.7-1ubuntu0.1 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.7-1ubuntu0.2 | vulnerable |
| Ubuntu | expat | 22.04 | 2.4.7-1ubuntu0.3 | fixed |
| Opensuse | clustershell | tumbleweed | 1.9.3-1.1 | fixed |
| Suse | python3 | linux enterprise module for web and scripting 12 | 3.4.10-25.127.1 | fixed |
| Suse | python3-base | linux enterprise module for web and scripting 12 | 3.4.10-25.127.1 | fixed |
| Suse | python3 | linux enterprise software development kit 12 sp5 | 3.4.10-25.127.1 | fixed |
| Suse | python3-base | linux enterprise software development kit 12 sp5 | 3.4.10-25.127.1 | fixed |
| Suse | python3 | linux enterprise server 12 sp5 | 3.4.10-25.127.1 | fixed |
| Suse | python3-base | linux enterprise server 12 sp5 | 3.4.10-25.127.1 | fixed |
| Suse | python3 | linux enterprise server for sap applications 12 sp5 | 3.4.10-25.127.1 | fixed |
| Suse | python3-base | linux enterprise server for sap applications 12 sp5 | 3.4.10-25.127.1 | fixed |
| Suse | expat | linux enterprise micro 5.3 | 2.4.4-150400.3.17.1 | fixed |
| Suse | expat | linux enterprise micro 5.4 | 2.4.4-150400.3.17.1 | fixed |
| Suse | expat | linux enterprise micro 5.5 | 2.4.4-150400.3.17.1 | fixed |
| Suse | expat | linux enterprise module for basesystem 15 sp5 | 2.4.4-150400.3.17.1 | fixed |
| Suse | expat | linux enterprise high performance computing 15 sp4-espos | 2.4.4-150400.3.17.1 | fixed |
| Suse | expat | linux enterprise high performance computing 15 sp4-ltss | 2.4.4-150400.3.17.1 | fixed |
| Suse | expat | linux enterprise server 15 sp4-ltss | 2.4.4-150400.3.17.1 | fixed |
| Suse | expat | linux enterprise server for sap applications 15 sp4 | 2.4.4-150400.3.17.1 | fixed |
| Suse | expat | manager proxy 4.3 | 2.4.4-150400.3.17.1 | fixed |
| Suse | expat | manager server 4.3 | 2.4.4-150400.3.17.1 | fixed |
| Opensuse | expat | leap micro 5.3 | 2.4.4-150400.3.17.1 | fixed |
| Opensuse | expat | leap micro 5.4 | 2.4.4-150400.3.17.1 | fixed |
| Opensuse | expat | leap 15.5 | 2.4.4-150400.3.17.1 | fixed |
| Opensuse | python312 | tumbleweed | 3.12.3-1.1 | fixed |
| Suse | python311 | linux enterprise module for public cloud 15 sp4 | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-core | linux enterprise module for public cloud 15 sp4 | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311 | linux enterprise module for python 3 15 sp5 | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-core | linux enterprise module for python 3 15 sp5 | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-documentation | linux enterprise module for python 3 15 sp5 | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311 | linux enterprise high performance computing 15 sp4-espos | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-core | linux enterprise high performance computing 15 sp4-espos | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-documentation | linux enterprise high performance computing 15 sp4-espos | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311 | linux enterprise high performance computing 15 sp4-ltss | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-core | linux enterprise high performance computing 15 sp4-ltss | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-documentation | linux enterprise high performance computing 15 sp4-ltss | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311 | linux enterprise server 15 sp4-ltss | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-core | linux enterprise server 15 sp4-ltss | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-documentation | linux enterprise server 15 sp4-ltss | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311 | linux enterprise server for sap applications 15 sp4 | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-core | linux enterprise server for sap applications 15 sp4 | 3.11.9-150400.9.26.1 | fixed |
| Suse | python311-documentation | linux enterprise server for sap applications 15 sp4 | 3.11.9-150400.9.26.1 | fixed |
| Opensuse | python311 | leap 15.5 | 3.11.9-150400.9.26.1 | fixed |
| Opensuse | python311-core | leap 15.5 | 3.11.9-150400.9.26.1 | fixed |
| Opensuse | python311-documentation | leap 15.5 | 3.11.9-150400.9.26.1 | fixed |
| Suse | python3 | linux enterprise high performance computing 15 sp2-ltss | 3.6.15-150000.3.147.1 | fixed |
| Suse | python3-core | linux enterprise high performance computing 15 sp2-ltss | 3.6.15-150000.3.147.1 | fixed |
| Suse | python3 | linux enterprise server 15 sp2-ltss | 3.6.15-150000.3.147.1 | fixed |
| Suse | python3-core | linux enterprise server 15 sp2-ltss | 3.6.15-150000.3.147.1 | fixed |
| Suse | python3 | linux enterprise server for sap applications 15 sp2 | 3.6.15-150000.3.147.1 | fixed |
| Suse | python3-core | linux enterprise server for sap applications 15 sp2 | 3.6.15-150000.3.147.1 | fixed |
| Suse | python3 | linux enterprise micro 5.1 | 3.6.15-150000.3.147.1 | fixed |
| Suse | python3-core | linux enterprise micro 5.1 | 3.6.15-150000.3.147.1 | fixed |
| Opensuse | python310 | tumbleweed | 3.10.14-1.1 | fixed |
| Suse | expat | linux enterprise software development kit 12 sp5 | 2.1.0-21.32.1 | fixed |
| Suse | expat | linux enterprise server 12 sp5 | 2.1.0-21.32.1 | fixed |
| Suse | expat | linux enterprise server for sap applications 12 sp5 | 2.1.0-21.32.1 | fixed |
| Opensuse | python310 | leap 15.5 | 3.10.14-150400.4.48.1 | fixed |
| Opensuse | python310-core | leap 15.5 | 3.10.14-150400.4.48.1 | fixed |
| Opensuse | python310-documentation | leap 15.5 | 3.10.14-150400.4.48.1 | fixed |
| Opensuse | python310 | leap 15.6 | 3.10.14-150400.4.48.1 | fixed |
| Opensuse | python310-core | leap 15.6 | 3.10.14-150400.4.48.1 | fixed |
| Opensuse | python310-documentation | leap 15.6 | 3.10.14-150400.4.48.1 | fixed |
| Opensuse | expat | tumbleweed | 2.6.0-1.1 | fixed |
| Suse | python39 | linux enterprise high performance computing 15 sp3-ltss | 3.9.19-150300.4.41.1 | fixed |
| Suse | python39-core | linux enterprise high performance computing 15 sp3-ltss | 3.9.19-150300.4.41.2 | fixed |
| Suse | python39 | linux enterprise server 15 sp3-ltss | 3.9.19-150300.4.41.1 | fixed |
| Suse | python39-core | linux enterprise server 15 sp3-ltss | 3.9.19-150300.4.41.2 | fixed |
| Suse | python39 | linux enterprise server for sap applications 15 sp3 | 3.9.19-150300.4.41.1 | fixed |
| Suse | python39-core | linux enterprise server for sap applications 15 sp3 | 3.9.19-150300.4.41.2 | fixed |
| Suse | python39 | enterprise storage 7.1 | 3.9.19-150300.4.41.1 | fixed |
| Suse | python39-core | enterprise storage 7.1 | 3.9.19-150300.4.41.2 | fixed |
| Opensuse | python39 | leap 15.5 | 3.9.19-150300.4.41.1 | fixed |
| Opensuse | python39-core | leap 15.5 | 3.9.19-150300.4.41.2 | fixed |
| Opensuse | python39-documentation | leap 15.5 | 3.9.19-150300.4.41.1 | fixed |
| Suse | python3 | linux enterprise micro 5.3 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise micro 5.3 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise micro 5.4 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise micro 5.4 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise micro 5.5 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise micro 5.5 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise module for basesystem 15 sp5 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise module for basesystem 15 sp5 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise module for basesystem 15 sp6 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise module for basesystem 15 sp6 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3-core | linux enterprise module for development tools 15 sp5 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3-core | linux enterprise module for development tools 15 sp6 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise high performance computing 15 sp3-ltss | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise high performance computing 15 sp3-ltss | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise high performance computing 15 sp4-espos | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise high performance computing 15 sp4-espos | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise high performance computing 15 sp4-ltss | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise high performance computing 15 sp4-ltss | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise server 15 sp3-ltss | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise server 15 sp3-ltss | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise server 15 sp4-ltss | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise server 15 sp4-ltss | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise server for sap applications 15 sp3 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise server for sap applications 15 sp3 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise server for sap applications 15 sp4 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise server for sap applications 15 sp4 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | manager proxy 4.3 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | manager proxy 4.3 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | manager server 4.3 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | manager server 4.3 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | linux enterprise micro 5.2 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | linux enterprise micro 5.2 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python3 | enterprise storage 7.1 | 3.6.15-150300.10.65.2 | fixed |
| Suse | python3-core | enterprise storage 7.1 | 3.6.15-150300.10.65.1 | fixed |
| Opensuse | python3 | leap micro 5.3 | 3.6.15-150300.10.65.2 | fixed |
| Opensuse | python3-core | leap micro 5.3 | 3.6.15-150300.10.65.1 | fixed |
| Opensuse | python3 | leap micro 5.4 | 3.6.15-150300.10.65.2 | fixed |
| Opensuse | python3-core | leap micro 5.4 | 3.6.15-150300.10.65.1 | fixed |
| Opensuse | python3 | leap 15.5 | 3.6.15-150300.10.65.2 | fixed |
| Opensuse | python3-core | leap 15.5 | 3.6.15-150300.10.65.1 | fixed |
| Opensuse | python3-documentation | leap 15.5 | 3.6.15-150300.10.65.1 | fixed |
| Opensuse | python3 | leap 15.6 | 3.6.15-150300.10.65.2 | fixed |
| Opensuse | python3-core | leap 15.6 | 3.6.15-150300.10.65.1 | fixed |
| Opensuse | python3-documentation | leap 15.6 | 3.6.15-150300.10.65.1 | fixed |
| Suse | python310 | linux enterprise high performance computing 15 sp4-espos | 3.10.14-150400.4.45.1 | fixed |
| Suse | python310-core | linux enterprise high performance computing 15 sp4-espos | 3.10.14-150400.4.45.1 | fixed |
| Suse | python310 | linux enterprise high performance computing 15 sp4-ltss | 3.10.14-150400.4.45.1 | fixed |
| Suse | python310-core | linux enterprise high performance computing 15 sp4-ltss | 3.10.14-150400.4.45.1 | fixed |
| Suse | python310 | linux enterprise server 15 sp4-ltss | 3.10.14-150400.4.45.1 | fixed |
| Suse | python310-core | linux enterprise server 15 sp4-ltss | 3.10.14-150400.4.45.1 | fixed |
| Suse | python310 | linux enterprise server for sap applications 15 sp4 | 3.10.14-150400.4.45.1 | fixed |
| Suse | python310-core | linux enterprise server for sap applications 15 sp4 | 3.10.14-150400.4.45.1 | fixed |
| Opensuse | python310 | leap 15.5 | 3.10.14-150400.4.45.1 | fixed |
| Opensuse | python310-core | leap 15.5 | 3.10.14-150400.4.45.1 | fixed |
| Opensuse | python310-documentation | leap 15.5 | 3.10.14-150400.4.45.1 | fixed |
| Opensuse | python39 | tumbleweed | 3.9.19-1.1 | fixed |
| Opensuse | python311 | tumbleweed | 3.11.9-1.1 | fixed |
| Suse | expat | linux enterprise micro 5.5 | 2.4.4-150400.3.17.1 | fixed |
| Opensuse | python38 | tumbleweed | 3.8.19-1.1 | fixed |
| Opensuse | python | tumbleweed | 2.7.18-46.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | expat | source | sid | 2.6.0-1 | not yet assigned | Not reported | [1063238] |
| Debian | expat | source | forky | 2.6.0-1 | not yet assigned | Not reported | [1063238] |
| Debian | expat | source | trixie | 2.6.0-1 | not yet assigned | Not reported | [1063238] |
| Debian | expat | source | bookworm | 2.5.0-1+deb12u2 | not yet assigned | Not reported | [1063238] |
| Debian | libxmltok | source | bookworm | (unfixed) | not yet assigned | Not reported | Not reported |
| Alpine | expat | apk | 3.16 | 2.6.0-r0 | Not reported | ALPINE-CVE-2023-52425 | Not reported |
| Alpine | expat | apk | 3.17 | 2.6.0-r0 | Not reported | ALPINE-CVE-2023-52425 | Not reported |
| Alpine | expat | apk | 3.18 | 2.6.0-r0 | Not reported | ALPINE-CVE-2023-52425 | Not reported |
| Alpine | expat | apk | 3.19 | 2.6.0-r0 | Not reported | ALPINE-CVE-2023-52425 | Not reported |
| Alpine | expat | apk | 3.20 | 2.6.0-r0 | Not reported | ALPINE-CVE-2023-52425 | Not reported |
| Alpine | expat | apk | 3.21 | 2.6.0-r0 | Not reported | ALPINE-CVE-2023-52425 | Not reported |
| Alpine | expat | apk | 3.22 | 2.6.0-r0 | Not reported | ALPINE-CVE-2023-52425 | Not reported |
| Alpine | expat | apk | 3.23 | 2.6.0-r0 | Not reported | ALPINE-CVE-2023-52425 | Not reported |
| Alpine | expat | apk | 3.24 | 2.6.0-r0 | Not reported | ALPINE-CVE-2023-52425 | Not reported |
| Ubuntu | expat | deb | 22.04 | 2.4.7-1ubuntu0.3 | Not reported | USN-6694-1 | Not reported |
| Opensuse | clustershell | rpm | tumbleweed | 1.9.3-1.1 | Not reported | OPENSUSE-SU-2025:15212-1 | Not reported |
| Suse | python3 | rpm | linux enterprise module for web and scripting 12 | 3.4.10-25.127.1 | Not reported | SUSE-SU-2024:1657-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise module for web and scripting 12 | 3.4.10-25.127.1 | Not reported | SUSE-SU-2024:1657-1 | Not reported |
| Suse | python3 | rpm | linux enterprise software development kit 12 sp5 | 3.4.10-25.127.1 | Not reported | SUSE-SU-2024:1657-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise software development kit 12 sp5 | 3.4.10-25.127.1 | Not reported | SUSE-SU-2024:1657-1 | Not reported |
| Suse | python3 | rpm | linux enterprise server 12 sp5 | 3.4.10-25.127.1 | Not reported | SUSE-SU-2024:1657-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise server 12 sp5 | 3.4.10-25.127.1 | Not reported | SUSE-SU-2024:1657-1 | Not reported |
| Suse | python3 | rpm | linux enterprise server for sap applications 12 sp5 | 3.4.10-25.127.1 | Not reported | SUSE-SU-2024:1657-1 | Not reported |
| Suse | python3-base | rpm | linux enterprise server for sap applications 12 sp5 | 3.4.10-25.127.1 | Not reported | SUSE-SU-2024:1657-1 | Not reported |
| Suse | expat | rpm | linux enterprise micro 5.3 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Suse | expat | rpm | linux enterprise micro 5.4 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Suse | expat | rpm | linux enterprise micro 5.5 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Suse | expat | rpm | linux enterprise module for basesystem 15 sp5 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Suse | expat | rpm | linux enterprise high performance computing 15 sp4-espos | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Suse | expat | rpm | linux enterprise high performance computing 15 sp4-ltss | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Suse | expat | rpm | linux enterprise server 15 sp4-ltss | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Suse | expat | rpm | linux enterprise server for sap applications 15 sp4 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Suse | expat | rpm | manager proxy 4.3 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Suse | expat | rpm | manager server 4.3 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Opensuse | expat | rpm | leap micro 5.3 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Opensuse | expat | rpm | leap micro 5.4 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Opensuse | expat | rpm | leap 15.5 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-1 | Not reported |
| Opensuse | python312 | rpm | tumbleweed | 3.12.3-1.1 | Not reported | OPENSUSE-SU-2024:13892-1 | Not reported |
| Suse | python311 | rpm | linux enterprise module for public cloud 15 sp4 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-core | rpm | linux enterprise module for public cloud 15 sp4 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311 | rpm | linux enterprise module for python 3 15 sp5 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-core | rpm | linux enterprise module for python 3 15 sp5 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-documentation | rpm | linux enterprise module for python 3 15 sp5 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311 | rpm | linux enterprise high performance computing 15 sp4-espos | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-core | rpm | linux enterprise high performance computing 15 sp4-espos | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-documentation | rpm | linux enterprise high performance computing 15 sp4-espos | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311 | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-core | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-documentation | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311 | rpm | linux enterprise server 15 sp4-ltss | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-core | rpm | linux enterprise server 15 sp4-ltss | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-documentation | rpm | linux enterprise server 15 sp4-ltss | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311 | rpm | linux enterprise server for sap applications 15 sp4 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-core | rpm | linux enterprise server for sap applications 15 sp4 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python311-documentation | rpm | linux enterprise server for sap applications 15 sp4 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Opensuse | python311 | rpm | leap 15.5 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Opensuse | python311-core | rpm | leap 15.5 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Opensuse | python311-documentation | rpm | leap 15.5 | 3.11.9-150400.9.26.1 | Not reported | SUSE-SU-2024:1556-1 | Not reported |
| Suse | python3 | rpm | linux enterprise high performance computing 15 sp2-ltss | 3.6.15-150000.3.147.1 | Not reported | SUSE-SU-2024:1774-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise high performance computing 15 sp2-ltss | 3.6.15-150000.3.147.1 | Not reported | SUSE-SU-2024:1774-1 | Not reported |
| Suse | python3 | rpm | linux enterprise server 15 sp2-ltss | 3.6.15-150000.3.147.1 | Not reported | SUSE-SU-2024:1774-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise server 15 sp2-ltss | 3.6.15-150000.3.147.1 | Not reported | SUSE-SU-2024:1774-1 | Not reported |
| Suse | python3 | rpm | linux enterprise server for sap applications 15 sp2 | 3.6.15-150000.3.147.1 | Not reported | SUSE-SU-2024:1774-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise server for sap applications 15 sp2 | 3.6.15-150000.3.147.1 | Not reported | SUSE-SU-2024:1774-1 | Not reported |
| Suse | python3 | rpm | linux enterprise micro 5.1 | 3.6.15-150000.3.147.1 | Not reported | SUSE-SU-2024:1774-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise micro 5.1 | 3.6.15-150000.3.147.1 | Not reported | SUSE-SU-2024:1774-1 | Not reported |
| Opensuse | python310 | rpm | tumbleweed | 3.10.14-1.1 | Not reported | OPENSUSE-SU-2024:13799-1 | Not reported |
| Suse | expat | rpm | linux enterprise software development kit 12 sp5 | 2.1.0-21.32.1 | Not reported | SUSE-SU-2024:3004-1 | Not reported |
| Suse | expat | rpm | linux enterprise server 12 sp5 | 2.1.0-21.32.1 | Not reported | SUSE-SU-2024:3004-1 | Not reported |
| Suse | expat | rpm | linux enterprise server for sap applications 12 sp5 | 2.1.0-21.32.1 | Not reported | SUSE-SU-2024:3004-1 | Not reported |
| Opensuse | python310 | rpm | leap 15.5 | 3.10.14-150400.4.48.1 | Not reported | SUSE-SU-2024:1698-1 | Not reported |
| Opensuse | python310-core | rpm | leap 15.5 | 3.10.14-150400.4.48.1 | Not reported | SUSE-SU-2024:1698-1 | Not reported |
| Opensuse | python310-documentation | rpm | leap 15.5 | 3.10.14-150400.4.48.1 | Not reported | SUSE-SU-2024:1698-1 | Not reported |
| Opensuse | python310 | rpm | leap 15.6 | 3.10.14-150400.4.48.1 | Not reported | SUSE-SU-2024:1698-1 | Not reported |
| Opensuse | python310-core | rpm | leap 15.6 | 3.10.14-150400.4.48.1 | Not reported | SUSE-SU-2024:1698-1 | Not reported |
| Opensuse | python310-documentation | rpm | leap 15.6 | 3.10.14-150400.4.48.1 | Not reported | SUSE-SU-2024:1698-1 | Not reported |
| Opensuse | expat | rpm | tumbleweed | 2.6.0-1.1 | Not reported | OPENSUSE-SU-2024:13695-1 | Not reported |
| Suse | python39 | rpm | linux enterprise high performance computing 15 sp3-ltss | 3.9.19-150300.4.41.1 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Suse | python39-core | rpm | linux enterprise high performance computing 15 sp3-ltss | 3.9.19-150300.4.41.2 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Suse | python39 | rpm | linux enterprise server 15 sp3-ltss | 3.9.19-150300.4.41.1 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Suse | python39-core | rpm | linux enterprise server 15 sp3-ltss | 3.9.19-150300.4.41.2 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Suse | python39 | rpm | linux enterprise server for sap applications 15 sp3 | 3.9.19-150300.4.41.1 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Suse | python39-core | rpm | linux enterprise server for sap applications 15 sp3 | 3.9.19-150300.4.41.2 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Suse | python39 | rpm | enterprise storage 7.1 | 3.9.19-150300.4.41.1 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Suse | python39-core | rpm | enterprise storage 7.1 | 3.9.19-150300.4.41.2 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Opensuse | python39 | rpm | leap 15.5 | 3.9.19-150300.4.41.1 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Opensuse | python39-core | rpm | leap 15.5 | 3.9.19-150300.4.41.2 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Opensuse | python39-documentation | rpm | leap 15.5 | 3.9.19-150300.4.41.1 | Not reported | SUSE-SU-2024:1009-1 | Not reported |
| Suse | python3 | rpm | linux enterprise micro 5.3 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise micro 5.3 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise micro 5.4 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise micro 5.4 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise micro 5.5 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise micro 5.5 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise module for basesystem 15 sp5 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise module for basesystem 15 sp5 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise module for basesystem 15 sp6 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise module for basesystem 15 sp6 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise module for development tools 15 sp5 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise module for development tools 15 sp6 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise high performance computing 15 sp3-ltss | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise high performance computing 15 sp3-ltss | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise high performance computing 15 sp4-espos | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise high performance computing 15 sp4-espos | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise server 15 sp3-ltss | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise server 15 sp3-ltss | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise server 15 sp4-ltss | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise server 15 sp4-ltss | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise server for sap applications 15 sp3 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise server for sap applications 15 sp3 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise server for sap applications 15 sp4 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise server for sap applications 15 sp4 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | manager proxy 4.3 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | manager proxy 4.3 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | manager server 4.3 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | manager server 4.3 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | linux enterprise micro 5.2 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | linux enterprise micro 5.2 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3 | rpm | enterprise storage 7.1 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python3-core | rpm | enterprise storage 7.1 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3 | rpm | leap micro 5.3 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3-core | rpm | leap micro 5.3 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3 | rpm | leap micro 5.4 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3-core | rpm | leap micro 5.4 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3 | rpm | leap 15.5 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3-core | rpm | leap 15.5 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3-documentation | rpm | leap 15.5 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3 | rpm | leap 15.6 | 3.6.15-150300.10.65.2 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3-core | rpm | leap 15.6 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Opensuse | python3-documentation | rpm | leap 15.6 | 3.6.15-150300.10.65.1 | Not reported | SUSE-SU-2024:2479-1 | Not reported |
| Suse | python310 | rpm | linux enterprise high performance computing 15 sp4-espos | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Suse | python310-core | rpm | linux enterprise high performance computing 15 sp4-espos | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Suse | python310 | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Suse | python310-core | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Suse | python310 | rpm | linux enterprise server 15 sp4-ltss | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Suse | python310-core | rpm | linux enterprise server 15 sp4-ltss | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Suse | python310 | rpm | linux enterprise server for sap applications 15 sp4 | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Suse | python310-core | rpm | linux enterprise server for sap applications 15 sp4 | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Opensuse | python310 | rpm | leap 15.5 | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Opensuse | python310-core | rpm | leap 15.5 | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Opensuse | python310-documentation | rpm | leap 15.5 | 3.10.14-150400.4.45.1 | Not reported | SUSE-SU-2024:1162-1 | Not reported |
| Opensuse | python39 | rpm | tumbleweed | 3.9.19-1.1 | Not reported | OPENSUSE-SU-2024:13800-1 | Not reported |
| Opensuse | python311 | rpm | tumbleweed | 3.11.9-1.1 | Not reported | OPENSUSE-SU-2024:13883-1 | Not reported |
| Suse | expat | rpm | linux enterprise micro 5.5 | 2.4.4-150400.3.17.1 | Not reported | SUSE-SU-2024:1129-2 | Not reported |
| Opensuse | python38 | rpm | tumbleweed | 3.8.19-1.1 | Not reported | OPENSUSE-SU-2024:13790-1 | Not reported |
| Opensuse | python | rpm | tumbleweed | 2.7.18-46.1 | Not reported | OPENSUSE-SU-2024:13955-1 | Not reported |
Notes
[bookworm] libxmltok: Minor issue, no runtime dependencies left
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
References
- [https://cert-portal.siemens.com/productcert/csaf/ssa-784301.json]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2024_1615.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2023-52425]
- [https://osv.dev/vulnerability/ALPINE-CVE-2023-52425]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2023-52425]
- [https://osv.dev/vulnerability/DLA-3783-1]
- [https://osv.dev/vulnerability/DLA-3893-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1009-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1129-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1129-2]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1162-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1556-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1657-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1698-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1774-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:2479-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:3004-1]
- [https://osv.dev/vulnerability/USN-6694-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13695-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13790-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13799-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13800-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13883-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13892-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:13955-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:15212-1]
- [https://security-tracker.debian.org/tracker/CVE-2023-52425]
- [https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52425.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1226.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]