OPENSUSE-SU-2022:0713-1 Security update for expat

This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs bsc1196025. - CVE-2022-25235: Fixed UTF-8 character validation in a certain context bsc1196026. - CVE-2022-25313: Fixed stack exhaustion in buildmodel vi...

The vulnerability of the storeAtts function in the ExPat library, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the storeAtts function in the Expat library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the xmltok_impl.c component in the ExPat library allows a hacker to execute arbitrary code.

The vulnerability of the xmltokimpl.c component in the ExPat library is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

The vulnerability of the copyString function in the Expat library, related to integer overflow, allows an attacker to cause a service failure.

The vulnerability of the copyString function in the Expat library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted request...

Amazon Linux 2 : expat (ALAS-2022-1754)

The version of expat installed on the remote host is prior to 2.1.0-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1754 advisory. expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML...

Security update for expat (important)

openSUSE Security Update: Security update for expat Announcement ID: openSUSE-SU-2022:0713-1 Rating: important References: 1196025 1196026 1196168 1196169 1196171 Cross-References: CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315 CVSS scores: CVE-2022-25235 NVD : 9.8...

SUSE: Security Advisory (SUSE-SU-2022:0698-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the `build_model` function in the ExPat library, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the buildmodel function in the Expat library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the `storeRawNames` function in the Expat library allows a hacker to trigger a service denial.

The vulnerability of the storeRawNames function in the Expat library is related to integer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure through a specially crafted request...

The vulnerability of the `build_model` function in the Expat library, related to buffer overflow in the stack, allows an attacker to execute arbitrary code.

The vulnerability of the buildmodel function in the Expat library is related to an error in determining the boundaries during the buildmodel process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Moderate Photon OS Security Update - PHSA-2022-0369

Updates of 'expat' packages of Photon OS have been released...

The vulnerability in the xmlparse.c component of the Expat library allows a hacker to induce a service failure.

The vulnerability of the xmlparse.c component in the Expat library is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted request...

The vulnerability of the nextScaffoldPart function in the Expat library, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the nextScaffoldPart function in the Expat library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Amazon Linux AMI : expat (ALAS-2022-1569)

The version of expat installed on the remote host is prior to 2.1.0-12.25. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1569 advisory. expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML...

SUSE-SU-2022:0698-1 Security update for expat

This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs bsc1196025. - CVE-2022-25235: Fixed UTF-8 character validation in a certain context bsc1196026. - CVE-2022-25313: Fixed stack exhaustion in buildmodel vi...

Important Photon OS Security Update - PHSA-2022-0448

Updates of 'vim', 'expat' packages of Photon OS have been released...

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server due to Expat vulnerabilities

Summary There are multiple vulnerabilities in the Expat library affecting the IBM HTTP Server used by IBM WebSphere Application Server CVE-2021-45960, CVE-2022-22822, CVE-2022-23990, CVE-2022-22823, CVE-2022-23852, CVE-2022-22825, CVE-2021-46143, CVE-2022-22824, CVE-2022-22826, and CVE-2022-22827...

Critical Photon OS Security Update - PHSA-2022-3.0-0366

Updates of 'expat' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-4.0-0158

Updates of 'wireshark', 'vim', 'expat' packages of Photon OS have been released...

Fedora: Security Advisory for mingw-expat (FEDORA-2022-3d9d67f558)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...