[SECURITY] Fedora 35 Update: mingw-expat-2.4.6-1.fc35

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

Critical Photon OS Security Update - PHSA-2022-3.0-0365

Updates of 'wireshark', 'expat' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-4.0-0157

Updates of 'cassandra', 'expat' packages of Photon OS have been released...

The vulnerability of the storeAtts() function in the Expat library allows a hacker to trigger a service failure.

The vulnerability of the storeAtts function in the Expat library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the doProlog() function in the Expat library allows a hacker to cause a service failure.

The vulnerability of the doProlog function in the Expat library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Critical Photon OS Security Update - PHSA-2022-0158

Updates of 'expat', 'vim', 'wireshark' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0366

Updates of 'expat' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0365

Updates of 'expat', 'wireshark' packages of Photon OS have been released...

In Expat (aka libexpat) before 2.4.5 there is an integer overflow in copyString.

...

In Expat (aka libexpat) before 2.4.5 an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

...

In Expat (aka libexpat) before 2.4.5 there is an integer overflow in storeRawNames.

...

CVE-2022-23852 affecting package expat 2.4.3-1

CVE-2022-23852 affecting package expat 2.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-23990 affecting package expat 2.4.3-1

CVE-2022-23990 affecting package expat 2.4.3-1. An upgraded version of the package is available that resolves this issue...

Critical Photon OS Security Update - PHSA-2022-0444

Updates of 'expat' packages of Photon OS have been released...

ROS-20220225-01

Expat parsing library vulnerability, related to integer overflow in copyString. Exploitation vulnerability could allow an attacker acting remotely to pass specially crafted data to an application, cause an integer overflow, and cause a denial of service condition on the target system. data, trigg...

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding such as checks for whether a UTF-8 character is valid in a certain context.

...

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

...

Debian DSA-5085-1 : expat - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5085 advisory. - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain...

Debian: Security Advisory (DSA-5085-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2022-0081)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...