Red Hat Security Advisory

RHSA-2023:0337

expat security update

Released 2023-01-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) expat-devel-2.4.9-1.el9_1.1
Red Hat Enterprise Linux BaseOS (v. 9) expat-2.4.9-1.el9_1.1

Fixes 1 record

TI-2022-21440 CVE-2022-43680 · GHSA-4hjv-8mmr-jxwv

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a…

MEDIUM 45

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03182 Published 2022-10-24 Partial fix CWE-416