[SECURITY] Fedora 41 Update: mingw-expat-2.6.3-1.fc41

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

RHSA-2022:6831 Red Hat Security Advisory: expat security update

Bulletin has no description...

RHSA-2022:6921 Red Hat Security Advisory: expat security update

Bulletin has no description...

CVE-2024-45491 affecting package expat for versions less than 2.6.3-1

CVE-2024-45491 affecting package expat for versions less than 2.6.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-45490 affecting package expat for versions less than 2.6.3-1

CVE-2024-45490 affecting package expat for versions less than 2.6.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-45492 affecting package expat for versions less than 2.6.3-1

CVE-2024-45492 affecting package expat for versions less than 2.6.3-1. An upgraded version of the package is available that resolves this issue...

RHSA-2020:4484 Red Hat Security Advisory: expat security update

Bulletin has no description...

RHSA-2020:3952 Red Hat Security Advisory: expat security update

Bulletin has no description...

RHSA-2020:4846 Red Hat Security Advisory: mingw-expat security update

Bulletin has no description...

SUSE SLED15: expat / libexpat-devel / libexpat-devel-32bit / libexpat1 / etc (SUSE-SU-2024:3216-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3216-1 advisory. - CVE-2024-45492: integer overflow in function nextScaffoldPart. bsc1229932 - CVE-2024-45491:...

openSUSE Security Advisory (SUSE-SU-2024:3216-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2024-1726163202 expat: Fix of 3 CVEs

The release version was raised because it corresponds to version 13 - CVE-2024-45490: reject negative len for XMLParseBuffer to prevent improper restriction of XML External Entity Reference - CVE-2024-45491: prevent integer overflow in dtdCopy - CVE-2024-45492: prevent integer overflow in...

CLSA-2024-1726163048 expat: Fix of 3 CVEs

The release version was raised because it corresponds to version 13 - CVE-2024-45490: reject negative len for XMLParseBuffer to prevent improper restriction of XML External Entity Reference - CVE-2024-45491: prevent integer overflow in dtdCopy - CVE-2024-45492: prevent integer overflow in...

SUSE-SU-2024:3216-1 Security update for expat

This update for expat fixes the following issues: - CVE-2024-45492: integer overflow in function nextScaffoldPart. bsc1229932 - CVE-2024-45491: integer overflow in dtdCopy. bsc1229931 - CVE-2024-45490: negative length for XMLParseBuffer not rejected. bsc1229930...

USN-7001-1: xmltok library vulnerabilities

Shang-Hung Wan discovered that Expat, contained within the xmltok library, did not properly handle certain function calls when a negative input length was provided. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2024-45490 Shang-Hung Wan...

USN-7001-1 libxmltok vulnerabilities

Shang-Hung Wan discovered that Expat, contained within the xmltok library, did not properly handle certain function calls when a negative input length was provided. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2024-45490 Shang-Hung Wan...

USN-7000-1 expat vulnerabilities

Shang-Hung Wan discovered that Expat did not properly handle certain function calls when a negative input length was provided. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2024-45490 Shang-Hung Wan discovered that Expat did not properly...

USN-7000-1: Expat vulnerabilities

Shang-Hung Wan discovered that Expat did not properly handle certain function calls when a negative input length was provided. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2024-45490 Shang-Hung Wan discovered that Expat did not properly...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 24.04 LTS : Expat vulnerabilities (USN-7000-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7000-1 advisory. Shang-Hung Wan discovered that Expat did not properly handle certain function calls when a negative input...

Tenable Nessus < 10.8.3 Multiple Vulnerabilities (TNS-2024-15 & TNS-2024-16)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.8.3. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-15 and TNS-2024-16 advisories. - Nessus leverages third-party software to help provide...