expat - security update

Fixed packages 2

Vulnerabilities 10

• Critical 9.8
  CVE-2022-22822 Public exploit

  addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• Critical 9.8
  CVE-2022-22823

  build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• Critical 9.8
  CVE-2022-22824

  defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• Critical 9.8
  CVE-2022-23852 Public exploit

  Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML…

  thunderbird firefox qt5-qtwebengine insighttoolkit4 Debian Ubuntu Azure Linux Alpine
  Jan 24, 2022
• High 8.8
  CVE-2021-45960 Public exploit

  In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can l…

  firefox insighttoolkit4 expat swish-e Debian Ubuntu Azure Linux Alpine
  Jan 1, 2022
• High 8.8
  CVE-2022-22825

  lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• High 8.8
  CVE-2022-22826

  nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• High 8.8
  CVE-2022-22827

  storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• High 8.1
  CVE-2021-46143 Public exploit

  In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

  firefox insighttoolkit4 qtwebengine-opensource-src expat Debian Ubuntu Azure Linux Alpine
  Jan 6, 2022
• High 7.5
  CVE-2022-23990 Public exploit

  Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

  thunderbird firefox expat matanza Debian Ubuntu Azure Linux Alpine
  Jan 26, 2022