openSUSE: Security Advisory for expat (openSUSE-SU-2022:0178-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Tenable Nessus 10.x < 10.1.1 / 8.x < 8.15.3 Third-Party Vulnerabilities (TNS-2022-05)

According to its self-reported version, the Tenable Nessus application running on the remote host is 10.x prior to 10.1.1, or 8.15.3 or earlier. It is, therefore, affected by multiple vulnerabilities in a third-party library, including: - addBinding in xmlparse.c in Expat aka libexpat before 2.4....

Critical Photon OS Security Update - PHSA-2022-0358

Updates of 'vim', 'python-lxml', 'mysql', 'wpasupplicant', 'python-numpy', 'rust', 'expat' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-3.0-0358

Updates of 'wpasupplicant', 'mysql', 'vim', 'python-lxml', 'python-numpy', 'rust', 'expat' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-4.0-0149

Updates of 'expat' packages of Photon OS have been released...

F5 Networks BIG-IP : Expat vulnerability (K05295469)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.5 / 15.1.4.1 / 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K05295469 advisory. - In libexpat before 2.2.8, crafted XML input could fool the parser into changing from...

Updated expat packages fix security vulnerability

Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES. CVE-2022-23852 Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990...

MGASA-2022-0048 Updated expat packages fix security vulnerability

Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES. CVE-2022-23852 Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990...

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

...

Security fix for the ALT Linux 9 package expat version 2.4.3-alt1

2.4.3-alt1 built Jan. 31, 2022 Vladimir D. Seleznev in task 293696 Jan. 18, 2022 Vladimir D. Seleznev - Updated to 2.4.3 with multiple security fixes. - Fixes: + CVE-2021-45960 issues with left shift by = 29 places in function storeAtts that can lead to realloc misbehavior; + CVE-2021-46143 Integ...

Critical Photon OS Security Update - PHSA-2022-0149

Updates of 'expat' packages of Photon OS have been released...

Debian: Security Advisory (DLA-2904-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2022-0435

Updates of 'expat', 'vim', 'python-numpy' packages of Photon OS have been released...

Debian DLA-2904-1 : expat - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2904 advisory. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating to...

[SECURITY] [DLA 2904-1] expat security update

Debian LTS Advisory DLA-2904-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 30, 2022 https://wiki.debian.org/LTS Package : expat Version : 2.2.0-2+deb9u4 CVE ID : CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825...

DLA-2904-1 expat - security update

Bulletin has no description...

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer for configurations with a nonzero XML_CONTEXT_BYTES.

...

Mageia: Security Advisory (MGASA-2022-0031)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0193)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0227)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...