ELSA-2022-6834

ELSA-2022-6834 - expat security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2022-10-06

Description

[2.1.0-15.0.1]
- lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910302]

[2.1.0-15]
- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674

Related CVEs

CVE-2022-40674

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	expat-2.1.0-15.0.1.el7_9.src.rpm	917c3db240c7f24e147f3cc87088fcb6	-
	expat-2.1.0-15.0.1.el7_9.aarch64.rpm	690875aeb9ba8968fc56250a5f342c3e	-
	expat-devel-2.1.0-15.0.1.el7_9.aarch64.rpm	cb92e8dda8d89d597dfe4697372dc7ea	-
	expat-static-2.1.0-15.0.1.el7_9.aarch64.rpm	e4aec0530bcb2409fed5e391500c6e73	-
Oracle Linux 7 (x86_64)	expat-2.1.0-15.0.1.el7_9.src.rpm	917c3db240c7f24e147f3cc87088fcb6	-
	expat-2.1.0-15.0.1.el7_9.i686.rpm	c68597fc3cba04d2ca77506b9c77c3a8	-
	expat-2.1.0-15.0.1.el7_9.x86_64.rpm	95e71d3a63e841d9695618573fe4b0b2	-
	expat-devel-2.1.0-15.0.1.el7_9.i686.rpm	adffb82dd6d941c194bc57da393d9263	-
	expat-devel-2.1.0-15.0.1.el7_9.x86_64.rpm	f191e3ab096f8525ac65ed23c2cf2e75	-
	expat-static-2.1.0-15.0.1.el7_9.i686.rpm	0e3a42e19b119d48e0ef513470bf2c3b	-
	expat-static-2.1.0-15.0.1.el7_9.x86_64.rpm	7e6ebc834554afa858c80b74a8b5b5bb	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team