[ALSA-2023:3068] mingw-expat security update
Severity
Important
Affected Packages
2
CVEs
1
mingw-expat security update
Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW.
Security Fix(es):
- expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Package | Affected Version |
---|---|
pkg:rpm/almalinux/mingw64-expat?arch=noarch&distro=almalinux-8 | < 2.4.8-2.el8 |
pkg:rpm/almalinux/mingw32-expat?arch=noarch&distro=almalinux-8 | < 2.4.8-2.el8 |
- ID
- ALSA-2023:3068
- Severity
- important
- URL
- https://errata.almalinux.org/ALSA-2023:3068.html
- Published
-
2023-05-16T00:00:00
(16 months ago) - Modified
-
2023-05-19T22:04:41
(16 months ago) - Rights
- Copyright 2023 AlmaLinux OS
- Other Advisories
-
- ALAS-2022-1654
- ALAS2-2022-1877
- ALAS2-2022-1900
- ALPINE:CVE-2022-40674
- ALSA-2022:6838
- ALSA-2022:6878
- ALSA-2022:7020
- ALSA-2022:7023
- ALSA-2022:7024
- DSA-5236-1
- ELSA-2022-6834
- ELSA-2022-6838
- ELSA-2022-6878
- ELSA-2022-6997
- ELSA-2022-6998
- ELSA-2022-7020
- ELSA-2022-7023
- ELSA-2022-7024
- ELSA-2022-7026
- ELSA-2022-9962
- ELSA-2022-9967
- FEDORA-2022-15ec504440
- FEDORA-2022-c22feb71ba
- FEDORA-2022-c68d90efc3
- FEDORA-2022-d93b3bd8b9
- FEDORA-2022-dcb1d7bcb1
- FREEBSD:0A0670A1-3E1A-11ED-B48B-E0D55E2A8BF9
- GLSA-202209-24
- GLSA-202211-06
- MFSA-2022-47
- MS:CVE-2022-40674
- RHSA-2022:6834
- RHSA-2022:6838
- RHSA-2022:6878
- RHSA-2022:6997
- RHSA-2022:6998
- RHSA-2022:7020
- RHSA-2022:7023
- RHSA-2022:7024
- RHSA-2022:7026
- RHSA-2023:3068
- RLSA-2022:6878
- RLSA-2022:7023
- RLSA-2022:7024
- SSA:2022-263-01
- SSA:2022-286-01
- SUSE-SU-2022:3466-1
- SUSE-SU-2022:3489-1
- SUSE-SU-2022:3597-1
- USN-5638-1
- USN-5638-2
- USN-5638-4
- USN-5726-1
Source | # ID | Name | URL |
---|---|---|---|
RHSA | RHSA-2023:3068 | https://access.redhat.com/errata/RHSA-2023:3068 | |
CVE | CVE-2022-40674 | https://access.redhat.com/security/cve/CVE-2022-40674 | |
Bugzilla | 2130769 | https://bugzilla.redhat.com/2130769 | |
Self | ALSA-2023:3068 | https://errata.almalinux.org/8/ALSA-2023-3068.html |
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/almalinux/mingw64-expat?arch=noarch&distro=almalinux-8 | almalinux | mingw64-expat | < 2.4.8-2.el8 | almalinux-8 | noarch | |
Affected | pkg:rpm/almalinux/mingw32-expat?arch=noarch&distro=almalinux-8 | almalinux | mingw32-expat | < 2.4.8-2.el8 | almalinux-8 | noarch |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |