Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::baseos | xmlrpc-c | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | xmlrpc-c-apps-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | xmlrpc-c-c++-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | xmlrpc-c-client | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | xmlrpc-c-client-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | xmlrpc-c-client++-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | xmlrpc-c-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | xmlrpc-c-debugsource | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | xmlrpc-c-apps-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | xmlrpc-c-c++ | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | xmlrpc-c-c++-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | xmlrpc-c-client-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | xmlrpc-c-client++ | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | xmlrpc-c-client++-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | xmlrpc-c-debuginfo | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | xmlrpc-c-debugsource | 0:1.51.0-8.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | xmlrpc-c-devel | 0:1.51.0-8.el8 |
Vulnerabilities 7
-
Critical 9.8CVE-2022-22822 Public exploit
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
Critical 9.8
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
Critical 9.8
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
High 8.8
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
High 8.8
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
High 8.8
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
-
High 8.1CVE-2021-46143 Public exploit
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2044455
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2044457
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2044464
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2044467
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2044479
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2044484
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2044488
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7692.json
-
report
https://access.redhat.com/security/cve/CVE-2021-46143
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-46143
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-46143
-
article
https://github.com/libexpat/libexpat/issues/532
-
report
https://access.redhat.com/security/cve/CVE-2022-22822
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22822
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22822
-
article
https://github.com/libexpat/libexpat/pull/539
-
report
https://access.redhat.com/security/cve/CVE-2022-22823
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22823
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22823
-
report
https://access.redhat.com/security/cve/CVE-2022-22824
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22824
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22824
-
report
https://access.redhat.com/security/cve/CVE-2022-22825
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22825
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22825
-
report
https://access.redhat.com/security/cve/CVE-2022-22826
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22826
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22826
-
report
https://access.redhat.com/security/cve/CVE-2022-22827
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22827
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22827