Red Hat Bug Fix Advisory: new packages: expat

Fixed packages 6

Vulnerabilities 11

• Critical 9.8
  CVE-2022-22822 Public exploit

  addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• Critical 9.8
  CVE-2022-22823

  build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• Critical 9.8
  CVE-2022-22824

  defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• Critical 9.8
  CVE-2022-23852 Public exploit

  Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML…

  thunderbird firefox qt5-qtwebengine insighttoolkit4 Debian Ubuntu Azure Linux Alpine
  Jan 24, 2022
• Critical 9.8
  CVE-2022-25235 Public exploit

  xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 16, 2022
• Critical 9.8
  CVE-2022-25315 Public exploit

  In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• High 8.8
  CVE-2022-22825

  lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• High 8.8
  CVE-2022-22826

  nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• High 8.8
  CVE-2022-22827

  storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Jan 8, 2022
• High 8.1
  CVE-2021-46143 Public exploit

  In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

  firefox insighttoolkit4 qtwebengine-opensource-src expat Debian Ubuntu Azure Linux Alpine
  Jan 6, 2022
• High 7.5
  CVE-2022-23990 Public exploit

  Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

  thunderbird firefox expat matanza Debian Ubuntu Azure Linux Alpine
  Jan 26, 2022

References

• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.0_release_notes/index
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_4046.json
• report
  https://access.redhat.com/security/cve/CVE-2021-46143
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044455
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-46143
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-46143
• article
  https://github.com/libexpat/libexpat/issues/532
• report
  https://access.redhat.com/security/cve/CVE-2022-22822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044457
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22822
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22822
• article
  https://github.com/libexpat/libexpat/pull/539
• report
  https://access.redhat.com/security/cve/CVE-2022-22823
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044464
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22823
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22823
• report
  https://access.redhat.com/security/cve/CVE-2022-22824
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044467
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22824
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22824
• report
  https://access.redhat.com/security/cve/CVE-2022-22825
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044479
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22825
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22825
• report
  https://access.redhat.com/security/cve/CVE-2022-22826
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044484
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22826
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22826
• report
  https://access.redhat.com/security/cve/CVE-2022-22827
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044488
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22827
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22827
• report
  https://access.redhat.com/security/cve/CVE-2022-23852
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044613
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23852
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23852
• article
  https://github.com/libexpat/libexpat/pull/550
• report
  https://access.redhat.com/security/cve/CVE-2022-23990
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2048356