Advisory: CLSA-2024:1726163032
OS: CentOS 8.4 ELS
Public date: 2024-09-12 13:43:54
Project: expat
Version: 2.2.5-13.el8.tuxcare.els1
Errata link: https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2024-1726163032.html
- The release version was raised because it corresponds to version 13 - CVE-2024-45490: reject negative len for XML_ParseBuffer to prevent improper restriction of XML External Entity Reference - CVE-2024-45491: prevent integer overflow in dtdCopy - CVE-2024-45492: prevent integer overflow in nextScaffoldPart
Update command: dnf update expat*
expat-2.2.5-13.el8.tuxcare.els1.i686.rpm expat-2.2.5-13.el8.tuxcare.els1.x86_64.rpm expat-devel-2.2.5-13.el8.tuxcare.els1.i686.rpm expat-devel-2.2.5-13.el8.tuxcare.els1.x86_64.rpm expat-static-2.2.5-13.el8.tuxcare.els1.x86_64.rpm