Summary
Expat is a C library for parsing XML documents.
Security Fix(es):
* expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | expat | 2.2.10-12.el9_0.3 |
| AlmaLinux · 9 | expat-devel | 2.2.10-12.el9_0.3 |
Vulnerabilities 1
-
High 8.1
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.