Summary
[2.2.5-4.0.1.3]
- lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314]
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | expat | 0:2.2.5-4.0.1.el8_5.3 |
| Oracle Linux · 8 | expat-devel | 0:2.2.5-4.0.1.el8_5.3 |
Vulnerabilities 1
-
High 7.5CVE-2022-23990 Public exploit
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.