ELSA-2023-0337

ELSA-2023-0337 - expat security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-01-24

Description

[2.4.9-1.1]
- CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
- Resolves: CVE-2022-43680

Related CVEs

CVE-2022-43680

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	expat-2.4.9-1.el9_1.1.src.rpm	1fc1add0615b2127ace22e3133854c5e37bcac5b5ec99d1d00f9dbe0e2f95bfc	-	ol9_aarch64_appstream
	expat-2.4.9-1.el9_1.1.src.rpm	1fc1add0615b2127ace22e3133854c5e37bcac5b5ec99d1d00f9dbe0e2f95bfc	-	ol9_aarch64_baseos_latest
	expat-2.4.9-1.el9_1.1.src.rpm	1fc1add0615b2127ace22e3133854c5e37bcac5b5ec99d1d00f9dbe0e2f95bfc	-	ol9_aarch64_u1_baseos_patch
	expat-2.4.9-1.el9_1.1.aarch64.rpm	c89d7b97f8910801c68686aec2b18f4f36808c689b6b2c8f6de12fab94f8604e	-	ol9_aarch64_baseos_latest
	expat-2.4.9-1.el9_1.1.aarch64.rpm	c89d7b97f8910801c68686aec2b18f4f36808c689b6b2c8f6de12fab94f8604e	-	ol9_aarch64_u1_baseos_patch
	expat-devel-2.4.9-1.el9_1.1.aarch64.rpm	c3486128928c8698ed9d7cfcc790ba0ebf19720a154069585862781355ad6940	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	expat-2.4.9-1.el9_1.1.src.rpm	1fc1add0615b2127ace22e3133854c5e37bcac5b5ec99d1d00f9dbe0e2f95bfc	-	ol9_x86_64_appstream
	expat-2.4.9-1.el9_1.1.src.rpm	1fc1add0615b2127ace22e3133854c5e37bcac5b5ec99d1d00f9dbe0e2f95bfc	-	ol9_x86_64_baseos_latest
	expat-2.4.9-1.el9_1.1.src.rpm	1fc1add0615b2127ace22e3133854c5e37bcac5b5ec99d1d00f9dbe0e2f95bfc	-	ol9_x86_64_u1_baseos_patch
	expat-2.4.9-1.el9_1.1.i686.rpm	e45e9e54c2e8f68dd2b34c7674dc3a725e5c56e71914381cafdb41ff13b339a4	-	ol9_x86_64_baseos_latest
	expat-2.4.9-1.el9_1.1.i686.rpm	e45e9e54c2e8f68dd2b34c7674dc3a725e5c56e71914381cafdb41ff13b339a4	-	ol9_x86_64_u1_baseos_patch
	expat-2.4.9-1.el9_1.1.x86_64.rpm	f9bec89b51c5b275957a8abdb8e5b723b1d1c0b8e6409b36d93fe84611e33f1d	-	ol9_x86_64_baseos_latest
	expat-2.4.9-1.el9_1.1.x86_64.rpm	f9bec89b51c5b275957a8abdb8e5b723b1d1c0b8e6409b36d93fe84611e33f1d	-	ol9_x86_64_u1_baseos_patch
	expat-devel-2.4.9-1.el9_1.1.i686.rpm	5cdf6ab253977216e6913a406423ac55abfc0a29f69ed837550d46d035c043cd	-	ol9_x86_64_appstream
	expat-devel-2.4.9-1.el9_1.1.x86_64.rpm	2794e1755d3bed9433d2965e8276622c670345def35a9c5e25ea70e2c40734fe	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team