Red Hat Security Advisory

RHSA-2022:4834

expat security update

Released 2022-05-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.4) expat-2.2.5-4.el8_4.3, expat-devel-2.2.5-4.el8_4.3

TI-2022-07855 CVE-2022-23852 · GHSA-h83g-c7g2-6r9h

MEDIUM 57

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05083 Published 2022-01-24 Partial fix CWE-190