Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/dev-libs/expat@2.1.0_beta3
purl pkg:ebuild/dev-libs/expat@2.1.0_beta3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-4zzy-q5zp-jkgm A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM. CVE-2009-3720
VCID-e742-j1bw-jbbh Multiple vulnerabilities have been found in Expat, possibly resulting in Denial of Service. CVE-2012-1148
VCID-f8mk-n3um-mufk Multiple vulnerabilities have been found in Expat, possibly resulting in Denial of Service. CVE-2012-1147
VCID-qtav-hqnd-b7fa A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM. CVE-2009-3560
VCID-ra3j-95vv-cfen Multiple vulnerabilities have been found in Expat, possibly resulting in Denial of Service. CVE-2012-0876

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:02:37.041439+00:00 Gentoo Importer Fixing VCID-e742-j1bw-jbbh https://security.gentoo.org/glsa/201209-06 38.0.0
2026-04-01T13:02:37.029102+00:00 Gentoo Importer Fixing VCID-f8mk-n3um-mufk https://security.gentoo.org/glsa/201209-06 38.0.0
2026-04-01T13:02:37.018702+00:00 Gentoo Importer Fixing VCID-ra3j-95vv-cfen https://security.gentoo.org/glsa/201209-06 38.0.0
2026-04-01T13:02:37.006244+00:00 Gentoo Importer Fixing VCID-4zzy-q5zp-jkgm https://security.gentoo.org/glsa/201209-06 38.0.0
2026-04-01T13:02:36.997924+00:00 Gentoo Importer Fixing VCID-qtav-hqnd-b7fa https://security.gentoo.org/glsa/201209-06 38.0.0