Summary
[1.51.0-8]
- Address some Coverity issues in the patch set
[1.51.0-7]
- lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
(#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
- Prevent integer overflow on m_groupSize in doProlog
(CVE-2021-46143) (#2058560)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | xmlrpc-c | 0:1.51.0-8.el8 |
| Oracle Linux · 8 | xmlrpc-c-c++ | 0:1.51.0-8.el8 |
| Oracle Linux · 8 | xmlrpc-c-client | 0:1.51.0-8.el8 |
| Oracle Linux · 8 | xmlrpc-c-client++ | 0:1.51.0-8.el8 |
| Oracle Linux · 8 | xmlrpc-c-devel | 0:1.51.0-8.el8 |
Vulnerabilities 7
-
Critical 9.8CVE-2022-22822 Public exploit
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
Critical 9.8
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
Critical 9.8
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
High 8.8
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
High 8.8
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
High 8.8
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
High 8.1CVE-2021-46143 Public exploit
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.