Medium ELSA-2020-3952 2 CVEs

Moderate: expat security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[2.1.0-12]
- add security fixes for CVE-2018-20843, CVE-2019-15903

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	expat	0:2.1.0-12.el7
Oracle Linux · 7	expat-devel	0:2.1.0-12.el7
Oracle Linux · 7	expat-static	0:2.1.0-12.el7

Vulnerabilities 2

High 7.5

CVE-2018-20843

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the X…

insighttoolkit4 expat swish-e matanza Debian Ubuntu Alpine

Jun 24, 2019
Medium 6.5

CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing to…

chromium-browser thunderbird firefox thunderbird Debian Ubuntu Alpine

Sep 4, 2019