Type: | SECURITY |
Severity: | IMPORTANT |
Release Date: | 2022-03-16 |
[2.2.5-4.3]
- Improve fix for CVE-2022-25236
- Related: CVE-2022-25236
[2.2.5-4.2]
- Fix multiple CVEs
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315
[2.2.5-4.1]
- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822
CVE-2022-25235 |
CVE-2022-25236 |
CVE-2022-25315 |
CVE-2021-45960 |
CVE-2021-46143 |
CVE-2022-22822 |
CVE-2022-22827 |
CVE-2022-23852 |
CVE-2022-22823 |
CVE-2022-22824 |
CVE-2022-22825 |
CVE-2022-22826 |
Release/Architecture | Filename | MD5sum | Superseded By Advisory |
Oracle Linux 8 (aarch64) | expat-2.2.5-4.el8_5.3.src.rpm | 524eaf3cfbe791d4e3443062433ba5d6 | - |
expat-2.2.5-4.el8_5.3.aarch64.rpm | c9557612bb312329dd8c23e138baa692 | - | |
expat-devel-2.2.5-4.el8_5.3.aarch64.rpm | c66e91a368c550c342e4b10a2e37622c | - | |
Oracle Linux 8 (x86_64) | expat-2.2.5-4.el8_5.3.src.rpm | 524eaf3cfbe791d4e3443062433ba5d6 | - |
expat-2.2.5-4.el8_5.3.i686.rpm | 3a96cef42c6351d192c216111646f73c | - | |
expat-2.2.5-4.el8_5.3.x86_64.rpm | ef208d6f166ca7dcf13b77ba32011954 | - | |
expat-devel-2.2.5-4.el8_5.3.i686.rpm | 97cc91975841d3ea97ccd1fa3297d704 | - | |
expat-devel-2.2.5-4.el8_5.3.x86_64.rpm | 29392af27269e9da8ee7eac11be338df | - |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team