Mageia: Security Advisory (MGASA-2017-0214)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Expat integer overflow vulnerability

Expat is a fast streaming XML parser written in C. An integer overflow vulnerability exists in versions of Expat prior to 2.4.4, which stems from a boundary error when processing untrusted input and can be exploited by remote attackers to execute arbitrary code on the system...

Mageia: Security Advisory (MGASA-2019-0321)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] expat

New expat packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/expat-2.4.3-i586-3slack14.2.txz: Rebuilt. Prevent integer overflow in doProlog. For more information, see:...

CVE-2022-22824 affecting package expat 2.4.1-2

CVE-2022-22824 affecting package expat 2.4.1-2. A patched version of the package is available...

CVE-2022-22823 affecting package expat 2.4.1-2

CVE-2022-22823 affecting package expat 2.4.1-2. A patched version of the package is available...

CVE-2022-22826 affecting package expat 2.4.1-2

CVE-2022-22826 affecting package expat 2.4.1-2. A patched version of the package is available...

CVE-2022-22827 affecting package expat 2.4.1-2

CVE-2022-22827 affecting package expat 2.4.1-2. A patched version of the package is available...

CVE-2022-22825 affecting package expat 2.4.1-2

CVE-2022-22825 affecting package expat 2.4.1-2. A patched version of the package is available...

CVE-2022-22822 affecting package expat 2.4.1-2

CVE-2022-22822 affecting package expat 2.4.1-2. A patched version of the package is available...

CVE-2021-46143 affecting package expat 2.4.1-2

CVE-2021-46143 affecting package expat 2.4.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2021-45960 affecting package expat 2.4.1-2

CVE-2021-45960 affecting package expat 2.4.1-2. An upgraded version of the package is available that resolves this issue...

ALPINE-CVE-2022-23990

Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...

DEBIAN-CVE-2022-23990

Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...

AZL-8334 CVE-2022-23990 affecting package expat for versions less than 2.4.8-1

Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...

UBUNTU-CVE-2022-23990

Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...

Integer overflow

Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...

CVE-2022-23990

Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...

CVE-2022-23990

Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...

CVE-2022-23990

CVE-2022-23990 affects Expat (libexpat) before 2.4.4. The issue is an integer overflow in doProlog, leading to denial of service and potential exploitation. Advisories from AlmaLinux and Amazon Linux indicate remediation via upgrading expat to a fixed version (e.g., Expats newer than 2.4.4; ALAS ...