MGASA-2022-0409 Updated expat packages fix security vulnerability

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. CVE-2022-43680...

SUSE-SU-2022:3874-1 Security update for expat

This update for expat fixes the following issues: - CVE-2022-43680: Fixed use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate bsc1204708...

OESA-2022-2037 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in...

CVE-2022-43680

A use-after-free flaw was found in the Expat package, caused by destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. This may lead to availability disruptions...

CVE-2022-43680 affecting package expat for versions less than 2.5.0-1

CVE-2022-43680 affecting package expat for versions less than 2.5.0-1. An upgraded version of the package is available that resolves this issue...

CLSA-2022-1667495485 expat: Fix of CVE-2022-43680

CVE-2022-43680: Fix overeager DTD destruction...

CLSA-2022-1667494718 expat: Fix of CVE-2022-43680

CVE-2022-43680: Fix overeager DTD destruction...

CLSA-2022-1667493762 expat: Fix of CVE-2022-43680

CVE-2022-43680: Fix overeager DTD destruction...

expat: Fix of CVE-2022-43680

CVE-2022-43680: Fix overeager DTD destruction...

CVE-2022-43680 affecting package expat 2.4.9-1

CVE-2022-43680 affecting package expat 2.4.9-1. An upgraded version of the package is available that resolves this issue...

[R1] Nessus Version 10.4.1 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.4.1 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 11/02/2022 - 17:01 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions have been...

[R1] Nessus Version 10.3.2 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.3.2 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 11/02/2022 - 14:05 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions have been...

CLSA-2022-1667412057 expat: Fix of CVE-2022-43680

CVE-2022-43680: Fix overeager DTD destruction...

python3.9 security update

3.9.10-3 - Security fix for CVE-2020-10735 - Fix the test suite support for Expat = 2.4.5 Resolves: rhbz1834423...

Vulnerability fixed in Expat

Expat developers have fixed a vulnerability. A malicious party could exploit the vulnerability to cause a denial-of-service, or possibly to execute arbitrary code execute arbitrary code with permissions from the application in which the libexpat library is used. The developers of expat have...

Expat: Denial of Service

Background Expat is a set of XML parsing libraries. Description In certain out-of-memory situations, Expat may free memory before it should, leading to a use-after-free. Impact A use-after-free can result in denial of service. Workaround There is no known workaround at this time. Resolution All...

GLSA-202210-38 : Expat: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202210-38 Expat: Denial of Service - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. CVE-2022-43680 Note that Nessu...

Debian: Security Advisory (DSA-5266-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

F5 Networks BIG-IP : Expat vulnerability (K44454157)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K44454157 advisory. libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.CVE-2022-40674ImpactAn...

[SECURITY] [DSA 5266-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5266-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2022 https://www.debian.org/security/faq -...