[ELSA-2022-9359] expat security update

Severity Important

Affected Packages 2

CVEs 3

[2.0.1-13.0.1]
- Prevent integer overflow in storeRawNames [CVE-2022-25315][Orabug: 34059442]
- Add missing validation of encoding [CVE-2022-25235][Orabug: 34059442]
- Protect against malicious namespace declarations [CVE-2022-25236][Orabug: 34059442]

Package	Affected Version
pkg:rpm/oraclelinux/expat?distro=oraclelinux-6.8	< 2.0.1-13.0.1.el6_8
pkg:rpm/oraclelinux/expat-devel?distro=oraclelinux-6.8	< 2.0.1-13.0.1.el6_8

ID

ELSA-2022-9359

Severity

important

URL

https://linux.oracle.com/errata/ELSA-2022-9359.html

Published

2022-05-06T00:00:00
(2 years ago)

Modified

2022-05-06T00:00:00
(2 years ago)

Rights

Other Advisories

Source	# ID	URL
elsa	ELSA-2022-9359	https://linux.oracle.com/errata/ELSA-2022-9359.html
CVE	CVE-2022-25235	https://linux.oracle.com/cve/CVE-2022-25235.html
CVE	CVE-2022-25236	https://linux.oracle.com/cve/CVE-2022-25236.html
CVE	CVE-2022-25315	https://linux.oracle.com/cve/CVE-2022-25315.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:rpm/oraclelinux/expat?distro=oraclelinux-6.8	oraclelinux	expat	< 2.0.1-13.0.1.el6_8	oraclelinux-6.8
Affected	pkg:rpm/oraclelinux/expat-devel?distro=oraclelinux-6.8	oraclelinux	expat-devel	< 2.0.1-13.0.1.el6_8	oraclelinux-6.8

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date