Summary
[2.2.5-16.0.1]
- lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314]
[2.2.5-16]
- Fix CVE-2024-50602
- Resolves: RHEL-65062
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | expat | 0:2.2.5-16.0.1.el8_10 |
| Oracle Linux · 8 | expat-devel | 0:2.2.5-16.0.1.el8_10 |
Vulnerabilities 1
-
Medium 5.9CVE-2024-50602 Public exploit
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_Sto…