Medium ELSA-2020-4484 2 CVEs

Moderate: expat security update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[2.2.5-4]
- add security fixes for CVE-2018-20843, CVE-2019-15903

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	expat	0:2.2.5-4.el8
Oracle Linux · 8	expat-devel	0:2.2.5-4.el8

Vulnerabilities 2

High 7.5

CVE-2018-20843

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the X…

insighttoolkit4 expat swish-e matanza Debian Ubuntu Alpine

Jun 24, 2019
Medium 6.5

CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing to…

chromium-browser thunderbird firefox thunderbird Debian Ubuntu Alpine

Sep 4, 2019