Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 10 Buster DLA-3165-1 Moderate: Expat Use-After-Free Exploit

debian lts
Calendar Grey October 28, 2022
Dist Debian Esm H88
Debian LTS Advisory DLA-3166-1 tackles an Expat XML parsing flaw aimed at remedying a use-after-free vulnerability.
In src:expat, an XML parsing C library, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations
Topics%20covered

Topics Covered

security advisory moderate debian memory error expat xml parsing

Summary

For Debian 10 buster, this problem has been fixed in version
2.2.6-2+deb10u6.

We recommend that you upgrade your expat packages.

For the detailed security status of expat please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/expat

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Package: expat
Version: 2.2.6-2+deb10u6
CVE ID: CVE-2022-43680
Debian Bug: 1022743

Topics%20covered

Topics Covered

security advisory moderate debian memory error expat xml parsing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here