Critical Photon OS Security Update - PHSA-2022-0158

Updates of 'expat', 'vim', 'wireshark' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0365

Updates of 'expat', 'wireshark' packages of Photon OS have been released...

In Expat (aka libexpat) before 2.4.5 there is an integer overflow in copyString.

...

In Expat (aka libexpat) before 2.4.5 an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

...

In Expat (aka libexpat) before 2.4.5 there is an integer overflow in storeRawNames.

...

CVE-2022-23852 affecting package expat 2.4.3-1

CVE-2022-23852 affecting package expat 2.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-23990 affecting package expat 2.4.3-1

CVE-2022-23990 affecting package expat 2.4.3-1. An upgraded version of the package is available that resolves this issue...

Critical Photon OS Security Update - PHSA-2022-0444

Updates of 'expat' packages of Photon OS have been released...

ROS-20220225-01

Expat parsing library vulnerability, related to integer overflow in copyString. Exploitation vulnerability could allow an attacker acting remotely to pass specially crafted data to an application, cause an integer overflow, and cause a denial of service condition on the target system. data, trigg...

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding such as checks for whether a UTF-8 character is valid in a certain context.

...

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

...

Debian DSA-5085-1 : expat - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5085 advisory. - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain...

Mageia: Security Advisory (MGASA-2022-0081)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5085-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5085-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5085-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2022 https://www.debian.org/security/faq -...

Updated expat packages fix security vulnerability

Passing malformed 2- and 3-byte UTF-8 sequences e.g. from start tag names to the XML processing application on top of Expat can cause arbitrary damage e.g. code execution depending on how invalid UTF-8 is handled inside the XML processor; validation was not their job but Expat's. Exploits with co...

Critical Photon OS Security Update - PHSA-2022-0445

Updates of 'vim', 'expat', 'go' packages of Photon OS have been released...

Ubuntu: Security Advisory (USN-5288-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for expat (openSUSE-SU-2022:0498-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current expat Multiple Vulnerabilities (SSA:2022-050-01)

The version of expat installed on the remote host is prior to 2.4.3 / 2.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-050-01 advisory. - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a...