SUSE SLES11 Security Update : expat (SUSE-SU-2022:14884-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14884-1 advisory. - CVE-2022-23852: Fixed signed integer overflow in XMLGetBuffer bsc1195054. - CVE-2022-23990: Fixed integer overflow in the doProlog function...

SUSE-SU-2022:14884-1 Security update for expat

This update for expat fixes the following issues: - CVE-2022-23852: Fixed signed integer overflow in XMLGetBuffer bsc1195054. - CVE-2022-23990: Fixed integer overflow in the doProlog function bsc1195217...

cambodiaexpatsonline.com Cross Site Scripting vulnerability OBB-2366160

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mageia: Security Advisory (MGASA-2022-0048)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 8 : mingw-expat (ALSA-2020:4846)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:4846 advisory. - In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and...

[R1] Nessus Versions 8.15.3 and 10.1.1 Fix Multiple Third-Party Vulnerabilities

R1 Nessus Versions 8.15.3 and 10.1.1 Fix Multiple Third-Party Vulnerabilities Arnie Cabral Tue, 02/08/2022 - 16:19 Nessus leverages third-party software to help provide underlying functionality. One of the third-party components Expat was found to contain vulnerabilities, and an updated version h...

openSUSE: Security Advisory for expat (openSUSE-SU-2022:0178-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Tenable Nessus 10.x < 10.1.1 / 8.x < 8.15.3 Third-Party Vulnerabilities (TNS-2022-05)

According to its self-reported version, the Tenable Nessus application running on the remote host is 10.x prior to 10.1.1, or 8.15.3 or earlier. It is, therefore, affected by multiple vulnerabilities in a third-party library, including: - addBinding in xmlparse.c in Expat aka libexpat before 2.4....

Critical Photon OS Security Update - PHSA-2022-0358

Updates of 'vim', 'python-lxml', 'mysql', 'wpasupplicant', 'python-numpy', 'rust', 'expat' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-3.0-0358

Updates of 'wpasupplicant', 'mysql', 'vim', 'python-lxml', 'python-numpy', 'rust', 'expat' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-4.0-0149

Updates of 'expat' packages of Photon OS have been released...

F5 Networks BIG-IP : Expat vulnerability (K05295469)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.5 / 15.1.4.1 / 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K05295469 advisory. - In libexpat before 2.2.8, crafted XML input could fool the parser into changing from...

Updated expat packages fix security vulnerability

Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES. CVE-2022-23852 Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990...

MGASA-2022-0048 Updated expat packages fix security vulnerability

Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES. CVE-2022-23852 Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990...

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

...

Critical Photon OS Security Update - PHSA-2022-0149

Updates of 'expat' packages of Photon OS have been released...

Security fix for the ALT Linux 9 package expat version 2.4.3-alt1

2.4.3-alt1 built Jan. 31, 2022 Vladimir D. Seleznev in task 293696 Jan. 18, 2022 Vladimir D. Seleznev - Updated to 2.4.3 with multiple security fixes. - Fixes: + CVE-2021-45960 issues with left shift by = 29 places in function storeAtts that can lead to realloc misbehavior; + CVE-2021-46143 Integ...

Debian: Security Advisory (DLA-2904-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2022-0435

Updates of 'expat', 'vim', 'python-numpy' packages of Photon OS have been released...

Debian DLA-2904-1 : expat - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2904 advisory. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating to...