Advisory: CLSA-2024:1726163048
OS: CentOS 8.5 ELS
Public date: 2024-09-12 13:44:10
Project: expat
Version: 2.2.5-13.el8.tuxcare.els1
Errata link: https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2024-1726163048.html
- The release version was raised because it corresponds to version 13 - CVE-2024-45490: reject negative len for XML_ParseBuffer to prevent improper restriction of XML External Entity Reference - CVE-2024-45491: prevent integer overflow in dtdCopy - CVE-2024-45492: prevent integer overflow in nextScaffoldPart
Update command: dnf update expat*
expat-2.2.5-13.el8.tuxcare.els1.i686.rpm expat-2.2.5-13.el8.tuxcare.els1.x86_64.rpm expat-devel-2.2.5-13.el8.tuxcare.els1.i686.rpm expat-devel-2.2.5-13.el8.tuxcare.els1.x86_64.rpm expat-static-2.2.5-13.el8.tuxcare.els1.x86_64.rpm