ELSA-2023-0337 — Moderate: expat security update (Oracle Linux 9)

Summary

[2.4.9-1.1]
- CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
- Resolves: CVE-2022-43680

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	expat	0:2.4.9-1.el9_1.1
Oracle Linux · 9	expat-devel	0:2.4.9-1.el9_1.1

Vulnerabilities 1

High 7.5

CVE-2022-43680 Public exploit

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnt…

thunderbird insighttoolkit4 expat swish-e Debian Ubuntu Azure Linux Alpine

Oct 24, 2022

Moderate: expat security update (Oracle Linux 9)

Summary

Fixed packages 2

Vulnerabilities 1

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnt…