Summary
[2.2.5-11.0.1.1]
- lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314]
[2.2.5-11.1]
- CVE-2023-52425 expat: parsing large tokens can trigger a denial of service
- Resolves: RHEL-29321
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | expat | 0:2.2.5-11.0.1.el8_9.1 |
| Oracle Linux · 8 | expat-devel | 0:2.2.5-11.0.1.el8_9.1 |
Vulnerabilities 1
-
High 7.5
libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in t…