[ALSA-2023:0103] Moderate: expat security update
Type:
security
Severity:
moderate
Release date:
2023-03-08
Description:
Expat is a C library for parsing XML documents. Security Fix(es): * expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (CVE-2022-43680) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 expat-devel-2.2.5-10.el8_7.1.aarch64.rpm 99cf3020f03f314712a7bc05ce71894a7f625dca6b1ecfd3d02cb3d8557ab5fe
aarch64 expat-2.2.5-10.el8_7.1.aarch64.rpm 9caf5b86c61f8942e701b2aec7b2238990848403135c72c8d95806e642b0dd9c
i686 expat-devel-2.2.5-10.el8_7.1.i686.rpm 029664f0e5dfe6750c26b22190d6d4addbc6daad798a4f1f0ac733826f58e28e
i686 expat-2.2.5-10.el8_7.1.i686.rpm 9098d48a06d87ce181bbbdd7f0d412228fb51781567d1ec08baca103c7946278
ppc64le expat-devel-2.2.5-10.el8_7.1.ppc64le.rpm 7e0d538fe12071e2ce64bf6209580caa77f8c1a3b27f972e7477736eea323832
ppc64le expat-2.2.5-10.el8_7.1.ppc64le.rpm ea8d51e48d02928f8936f87e157ba742c3549c29234a8ef8b2e32a16b32a3458
s390x expat-2.2.5-10.el8_7.1.s390x.rpm d75cae647435ac1b334f30c79e57406e89dc34a13736f0532083910a19b6ef21
s390x expat-devel-2.2.5-10.el8_7.1.s390x.rpm fe94ebff486939f4130f6420772b2c1301513f6f967a4b7a4e6c203a05929970
x86_64 expat-devel-2.2.5-10.el8_7.1.x86_64.rpm 97c32fb1d238599e834019d4ff10214b0f2c26d64c007e6628c182731758376e
x86_64 expat-2.2.5-10.el8_7.1.x86_64.rpm beccf4f549a21235ceb64179af17871a0a472f8ec6d39dd1c19749b8fc91acd8
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.