Red Hat Security Advisory: mingw-expat security update

Fixed packages 5

Vulnerabilities 6

• Critical 9.8
  CVE-2022-25235 Public exploit

  xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 16, 2022
• Critical 9.8
  CVE-2022-25236 Public exploit EPSS 35%

  xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespac…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 16, 2022
• Critical 9.8
  CVE-2022-25315 Public exploit

  In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• High 7.5
  CVE-2022-23990 Public exploit

  Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

  thunderbird firefox expat swish-e Debian Ubuntu Azure Linux Alpine
  Jan 26, 2022
• High 7.5
  CVE-2022-25314 Public exploit

  In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• Medium 6.5
  CVE-2022-25313 Public exploit

  In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2048356
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2056350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2056354
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2056363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2056366
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2056370
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7811.json
• report
  https://access.redhat.com/security/cve/CVE-2022-23990
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23990
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23990
• report
  https://access.redhat.com/security/cve/CVE-2022-25235
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-25235
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-25235
• article
  https://blog.hartwork.org/posts/expat-2-4-5-released/
• report
  https://access.redhat.com/security/cve/CVE-2022-25236
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-25236
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-25236
• report
  https://access.redhat.com/security/cve/CVE-2022-25313
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-25313
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-25313
• report
  https://access.redhat.com/security/cve/CVE-2022-25314
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-25314
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-25314
• report
  https://access.redhat.com/security/cve/CVE-2022-25315
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-25315
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-25315