TI-2022-09008 CVE-2022-25315 · GHSA-8w4r-jhg8-8rvj
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
Priority HIGH 82
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
RHSA-2022:1012
expat security update
Released 2022-03-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS EUS (v.8.4) expat-2.2.5-4.el8_4.2, expat-devel-2.2.5-4.el8_4.2
Fixes 3 records
TI-2022-08947 CVE-2022-25236 · GHSA-3c6c-gjpg-qq92
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert…
Priority HIGH 75
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
TI-2022-08946 CVE-2022-25235 · GHSA-8mw4-grgw-m3fp
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding…
Priority MEDIUM 57
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.