ELSA-2022-0951

ELSA-2022-0951 - expat security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2022-03-16

Description


[2.2.5-4.3]
- Improve fix for CVE-2022-25236
- Related: CVE-2022-25236

[2.2.5-4.2]
- Fix multiple CVEs
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315

[2.2.5-4.1]
- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822


Related CVEs


CVE-2022-25235
CVE-2022-25236
CVE-2022-25315
CVE-2021-45960
CVE-2021-46143
CVE-2022-22822
CVE-2022-22827
CVE-2022-23852
CVE-2022-22823
CVE-2022-22824
CVE-2022-22825
CVE-2022-22826

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 8 (aarch64) expat-2.2.5-4.el8_5.3.src.rpm524eaf3cfbe791d4e3443062433ba5d6-
expat-2.2.5-4.el8_5.3.aarch64.rpmc9557612bb312329dd8c23e138baa692-
expat-devel-2.2.5-4.el8_5.3.aarch64.rpmc66e91a368c550c342e4b10a2e37622c-
Oracle Linux 8 (x86_64) expat-2.2.5-4.el8_5.3.src.rpm524eaf3cfbe791d4e3443062433ba5d6-
expat-2.2.5-4.el8_5.3.i686.rpm3a96cef42c6351d192c216111646f73c-
expat-2.2.5-4.el8_5.3.x86_64.rpmef208d6f166ca7dcf13b77ba32011954-
expat-devel-2.2.5-4.el8_5.3.i686.rpm97cc91975841d3ea97ccd1fa3297d704-
expat-devel-2.2.5-4.el8_5.3.x86_64.rpm29392af27269e9da8ee7eac11be338df-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete