ELSA-2024-1615

ELSA-2024-1615 - expat security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-04-03

Description

[2.2.5-11.0.1.1]
- lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314]

[2.2.5-11.1]
- CVE-2023-52425 expat: parsing large tokens can trigger a denial of service
- Resolves: RHEL-29321

Related CVEs

CVE-2023-52425

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	expat-2.2.5-11.0.1.el8_9.1.src.rpm	cf34d07f1f5b042edc1c8eed6b1487d7b6ce88e90cc19598696137cdf10f70e8	-	ol8_aarch64_baseos_latest
	expat-2.2.5-11.0.1.el8_9.1.src.rpm	cf34d07f1f5b042edc1c8eed6b1487d7b6ce88e90cc19598696137cdf10f70e8	-	ol8_aarch64_u9_baseos_patch
	expat-2.2.5-11.0.1.el8_9.1.aarch64.rpm	b1c642bac56255195a0b98c506870393ac369543fc99409666a93141e7249b5e	-	ol8_aarch64_baseos_latest
	expat-2.2.5-11.0.1.el8_9.1.aarch64.rpm	b1c642bac56255195a0b98c506870393ac369543fc99409666a93141e7249b5e	-	ol8_aarch64_u9_baseos_patch
	expat-devel-2.2.5-11.0.1.el8_9.1.aarch64.rpm	bf496120a128834f2d9319235b5376c9355009c4de10a228e89c620572bddf13	-	ol8_aarch64_baseos_latest
	expat-devel-2.2.5-11.0.1.el8_9.1.aarch64.rpm	bf496120a128834f2d9319235b5376c9355009c4de10a228e89c620572bddf13	-	ol8_aarch64_u9_baseos_patch
Oracle Linux 8 (x86_64)	expat-2.2.5-11.0.1.el8_9.1.src.rpm	cf34d07f1f5b042edc1c8eed6b1487d7b6ce88e90cc19598696137cdf10f70e8	-	ol8_x86_64_baseos_latest
	expat-2.2.5-11.0.1.el8_9.1.src.rpm	cf34d07f1f5b042edc1c8eed6b1487d7b6ce88e90cc19598696137cdf10f70e8	-	ol8_x86_64_u9_baseos_patch
	expat-2.2.5-11.0.1.el8_9.1.i686.rpm	392e08dee5fcd6926ca5502b31d7cdf220a0fd93649665f776495dd374999e30	-	ol8_x86_64_baseos_latest
	expat-2.2.5-11.0.1.el8_9.1.i686.rpm	392e08dee5fcd6926ca5502b31d7cdf220a0fd93649665f776495dd374999e30	-	ol8_x86_64_u9_baseos_patch
	expat-2.2.5-11.0.1.el8_9.1.x86_64.rpm	1525fa36800feda9a97a754d55f23d9e08e052729af091b0d0c45aeaa2f2e326	-	exadata_dbserver_23.1.13.0.0_x86_64_base
	expat-2.2.5-11.0.1.el8_9.1.x86_64.rpm	1525fa36800feda9a97a754d55f23d9e08e052729af091b0d0c45aeaa2f2e326	-	exadata_dbserver_23.1.14.0.0_x86_64_base
	expat-2.2.5-11.0.1.el8_9.1.x86_64.rpm	1525fa36800feda9a97a754d55f23d9e08e052729af091b0d0c45aeaa2f2e326	-	exadata_dbserver_23.1.15.0.0_x86_64_base
	expat-2.2.5-11.0.1.el8_9.1.x86_64.rpm	1525fa36800feda9a97a754d55f23d9e08e052729af091b0d0c45aeaa2f2e326	-	exadata_dbserver_24.1.0.0.0_x86_64_base
	expat-2.2.5-11.0.1.el8_9.1.x86_64.rpm	1525fa36800feda9a97a754d55f23d9e08e052729af091b0d0c45aeaa2f2e326	-	exadata_dbserver_24.1.1.0.0_x86_64_base
	expat-2.2.5-11.0.1.el8_9.1.x86_64.rpm	1525fa36800feda9a97a754d55f23d9e08e052729af091b0d0c45aeaa2f2e326	-	exadata_dbserver_24.1.3.0.0_x86_64_base
	expat-2.2.5-11.0.1.el8_9.1.x86_64.rpm	1525fa36800feda9a97a754d55f23d9e08e052729af091b0d0c45aeaa2f2e326	-	exadata_dbserver_24.1.4.0.0_x86_64_base
	expat-2.2.5-11.0.1.el8_9.1.x86_64.rpm	1525fa36800feda9a97a754d55f23d9e08e052729af091b0d0c45aeaa2f2e326	-	ol8_x86_64_baseos_latest
	expat-2.2.5-11.0.1.el8_9.1.x86_64.rpm	1525fa36800feda9a97a754d55f23d9e08e052729af091b0d0c45aeaa2f2e326	-	ol8_x86_64_u9_baseos_patch
	expat-devel-2.2.5-11.0.1.el8_9.1.i686.rpm	aac7c265965b1b642e1bbe6c6918b05dfbbf08d4acd6058f655666bd33569398	-	ol8_x86_64_baseos_latest
	expat-devel-2.2.5-11.0.1.el8_9.1.i686.rpm	aac7c265965b1b642e1bbe6c6918b05dfbbf08d4acd6058f655666bd33569398	-	ol8_x86_64_u9_baseos_patch
	expat-devel-2.2.5-11.0.1.el8_9.1.x86_64.rpm	ba0ca800b396a63626a966ef4f4d1aecdd6a39ff3ac9894309980099afafdbb6	-	ol8_x86_64_baseos_latest
	expat-devel-2.2.5-11.0.1.el8_9.1.x86_64.rpm	ba0ca800b396a63626a966ef4f4d1aecdd6a39ff3ac9894309980099afafdbb6	-	ol8_x86_64_u9_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team