ELSA-2024-6989

ELSA-2024-6989 - expat security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2024-09-24

Description

[2.2.5-15.0.1]
- lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314]

[2.2.5-15]
- Rebuild for test reconfiguration

[2.2.5-14]
- Fix multiple CVEs
- Fix CVE-2024-45492 integer overflow
- Fix CVE-2024-45491 Integer Overflow or Wraparound
- Fix CVE-2024-45490 Negative Length Parsing Vulnerability
- Resolves: RHEL-57505
- Resolves: RHEL-57493
- Resolves: RHEL-56751

Related CVEs

CVE-2024-45491

CVE-2024-45490

CVE-2024-45492

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	expat-2.2.5-15.0.1.el8_10.src.rpm	ddded4a550deb053acc6d766bb990237	-	ol8_aarch64_baseos_latest
	expat-2.2.5-15.0.1.el8_10.src.rpm	ddded4a550deb053acc6d766bb990237	-	ol8_aarch64_u10_baseos_patch
	expat-2.2.5-15.0.1.el8_10.aarch64.rpm	bffe861340a2e76877c363a6d826bfab	-	ol8_aarch64_baseos_latest
	expat-2.2.5-15.0.1.el8_10.aarch64.rpm	bffe861340a2e76877c363a6d826bfab	-	ol8_aarch64_u10_baseos_patch
	expat-devel-2.2.5-15.0.1.el8_10.aarch64.rpm	da42ce187b4e50fe9fa6ead3ea414934	-	ol8_aarch64_baseos_latest
	expat-devel-2.2.5-15.0.1.el8_10.aarch64.rpm	da42ce187b4e50fe9fa6ead3ea414934	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	expat-2.2.5-15.0.1.el8_10.src.rpm	ddded4a550deb053acc6d766bb990237	-	ol8_x86_64_baseos_latest
	expat-2.2.5-15.0.1.el8_10.src.rpm	ddded4a550deb053acc6d766bb990237	-	ol8_x86_64_u10_baseos_patch
	expat-2.2.5-15.0.1.el8_10.i686.rpm	857f17683204f45d714c70b9dd6379b9	-	ol8_x86_64_baseos_latest
	expat-2.2.5-15.0.1.el8_10.i686.rpm	857f17683204f45d714c70b9dd6379b9	-	ol8_x86_64_u10_baseos_patch
	expat-2.2.5-15.0.1.el8_10.x86_64.rpm	7d14a337c43b60f1993767a270793da3	-	ol8_x86_64_baseos_latest
	expat-2.2.5-15.0.1.el8_10.x86_64.rpm	7d14a337c43b60f1993767a270793da3	-	ol8_x86_64_u10_baseos_patch
	expat-devel-2.2.5-15.0.1.el8_10.i686.rpm	0f0ae56dcaa58d22f6638dc7c80e7584	-	ol8_x86_64_baseos_latest
	expat-devel-2.2.5-15.0.1.el8_10.i686.rpm	0f0ae56dcaa58d22f6638dc7c80e7584	-	ol8_x86_64_u10_baseos_patch
	expat-devel-2.2.5-15.0.1.el8_10.x86_64.rpm	2c39472867905007203f675d99e3c459	-	ol8_x86_64_baseos_latest
	expat-devel-2.2.5-15.0.1.el8_10.x86_64.rpm	2c39472867905007203f675d99e3c459	-	ol8_x86_64_u10_baseos_patch