Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Oracle Linux 8 ELSA-2024-6989 moderate: expat integer overflow fix

oracle
Calendar Grey September 27, 2024
Oracle Linux Logo Esm H88
The latest Oracle Linux 8 updates feature a critical security advisory, ELSA-2024-6990, which focuses on a buffer overflow and JSON processing vulnerabilities.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[2.2.5-15.0.1] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-15] - Rebuild for test reconfiguration [2.2.5-14] - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751

Topics%20covered

Topics Covered

security advisory moderate integer overflow parsing issue expat Oracle Linux

SRPMs

http://oss.oracle.com/ol8/SRPMS-updates//expat-2.2.5-15.0.1.el8_10.src.rpm

x86_64

expat-2.2.5-15.0.1.el8_10.i686.rpm expat-2.2.5-15.0.1.el8_10.x86_64.rpm expat-devel-2.2.5-15.0.1.el8_10.i686.rpm expat-devel-2.2.5-15.0.1.el8_10.x86_64.rpm

aarch64

expat-2.2.5-15.0.1.el8_10.aarch64.rpm expat-devel-2.2.5-15.0.1.el8_10.aarch64.rpm

Related CVEs: CVE-2024-45490 CVE-2024-45491 CVE-2024-45492

Topics%20covered

Topics Covered

security advisory moderate integer overflow parsing issue expat Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here