[SECURITY] Fedora 34 Update: expat-2.4.7-1.fc34

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

rotterdamexpatcentre.acc.studio418.nl Cross Site Scripting vulnerability OBB-2503424

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Important: Red Hat Security Advisory: expat security update

An update for expat is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor...

expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

A flaw was found in expat. Passing one or more namespace separator characters in the "xmlns:prefix" attribute values made expat send malformed tag names to the XML processor on top of expat. This issue causes arbitrary code execution depending on how unexpected cases are handled inside the XML...

expat: Integer overflow in storeRawNames()

An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...

RHEL 6 : expat (RHSA-2022:1309)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1309 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code...

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On due to Expat vulnerabilities

Summary There are multiple vulnerabilities in the Expat library affecting the IBM HTTP Server used by IBM WebSphere Application Server CVE-2022-25313, CVE-2022-25315, CVE-2022-25235,CVE-2022-25236, CVE-2021-45960, CVE-2022-22822, CVE-2022-23990, CVE-2022-22823, CVE-2022-23852, CVE-2022-22825,...

CVE-2021-45960 affecting package expat for versions less than 2.4.3-1

CVE-2021-45960 affecting package expat for versions less than 2.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-22826 affecting package expat for versions less than 2.4.3-1

CVE-2022-22826 affecting package expat for versions less than 2.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-22827 affecting package expat for versions less than 2.4.3-1

CVE-2022-22827 affecting package expat for versions less than 2.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-22825 affecting package expat for versions less than 2.4.3-1

CVE-2022-22825 affecting package expat for versions less than 2.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-22822 affecting package expat for versions less than 2.4.3-1

CVE-2022-22822 affecting package expat for versions less than 2.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-46143 affecting package expat for versions less than 2.4.3-1

CVE-2021-46143 affecting package expat for versions less than 2.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-22823 affecting package expat for versions less than 2.4.3-1

CVE-2022-22823 affecting package expat for versions less than 2.4.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-22824 affecting package expat for versions less than 2.4.3-1

CVE-2022-22824 affecting package expat for versions less than 2.4.3-1. An upgraded version of the package is available that resolves this issue...

expat: Integer overflow in storeRawNames()

An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...

expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor...

expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

A flaw was found in expat. Passing one or more namespace separator characters in the "xmlns:prefix" attribute values made expat send malformed tag names to the XML processor on top of expat. This issue causes arbitrary code execution depending on how unexpected cases are handled inside the XML...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase

Summary IBM HTTP Server IHS is shipped as a component of IBM Rational ClearCase. Information about a security vulnerability affecting IHS has been published in a security bulletin. CVE-2021-45960, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826, CVE-2022-22827,...