Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2022:60-1 Important: Expat Security Updates for SLES12 SP5

suse
Calendar Grey January 26, 2022
Dist Suse Esm H88
Gain essential knowledge on the SUSE Container update for suse/sles12sp5, encompassing security enhancements and patch information.
The container suse/sles12sp5 was updated

Summary

Advisory ID: SUSE-SU-2022:179-1 Released: Tue Jan 25 14:18:44 2022 Summary: Security update for expat Type: security Severity: important

References

References : 1194251 1194362 1194474 1194476 1194477 1194478 1194479 1194480

CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824

CVE-2022-22825 CVE-2022-22826 CVE-2022-22827

1194251,1194362,1194474,1194476,1194477,1194478,1194479,1194480,CVE-2021-45960,CVE-2021-46143,CVE-2022-22822,CVE-2022-22823,CVE-2022-22824,CVE-2022-22825,CVE-2022-22826,CVE-2022-22827

This update for expat fixes the following issues:

- CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251).

- CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362).

- CVE-2022-22822: Fixed integer overflow in addBinding in xmlparse.c (bsc#1194474).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:60-1
Container Tags : suse/sles12sp5:6.5.286 , suse/sles12sp5:latest
Container Release : 6.5.286
Severity : important
Type : security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here