Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Scientific Linux SL7: SLSA-2022-6834-1 Critical Expat Security Issue

Calendar Oct 06, 2022 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory critical security fix use-after-free expat Scientific Linux
expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 expat-2.1.0-15.el7_9.i686.rpm expat-2.1.0-15.el7_9.x86_64.rpm expat-debuginfo-2.1.0-15.el7_9.i686.rpm expat-debuginfo-2.1.0-15.el7_9.x86_ [More...] 
Synopsis:          Important: expat security update
Advisory ID:       SLSA-2022:6834-1
Issue Date:        2022-10-06
CVE Numbers:       CVE-2022-40674
--

Security Fix(es):

* expat: a use-after-free in the doContent function in xmlparse.c
(CVE-2022-40674)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
--

SL7
  x86_64
    expat-2.1.0-15.el7_9.i686.rpm
    expat-2.1.0-15.el7_9.x86_64.rpm
    expat-debuginfo-2.1.0-15.el7_9.i686.rpm
    expat-debuginfo-2.1.0-15.el7_9.x86_64.rpm
    expat-devel-2.1.0-15.el7_9.i686.rpm
    expat-devel-2.1.0-15.el7_9.x86_64.rpm
    expat-static-2.1.0-15.el7_9.i686.rpm
    expat-static-2.1.0-15.el7_9.x86_64.rpm

- Scientific Linux Development Team