Red Hat Security AdvisoryRHSA-2022:6834
expat security update
Released 2022-10-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) expat-2.1.0-15.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) expat-devel-2.1.0-15.el7_9, expat-static-2.1.0-15.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) expat-devel-2.1.0-15.el7_9, expat-static-2.1.0-15.el7_9
- Red Hat Enterprise Linux Server (v. 7) expat-2.1.0-15.el7_9, expat-2.1.0-15.el7_9.ppc, expat-devel-2.1.0-15.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7) expat-static-2.1.0-15.el7_9, expat-static-2.1.0-15.el7_9.ppc
- Red Hat Enterprise Linux Workstation (v. 7) expat-2.1.0-15.el7_9, expat-devel-2.1.0-15.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) expat-static-2.1.0-15.el7_9
Fixes 1 record
Priority MEDIUM 42
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0225 · Published 2022-09-14 · Partial fix CWE-416