RHSA-2022:1069: CVEs fixed (Red Hat)

RHSA-2022:1069 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2022-25315 CRITICAL 9.8 UPGRADE MITIGATE In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
• CVE-2022-25236 CRITICAL 9.8 UPGRADE MITIGATE xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into

Applies to

• RHEL 7 · fixed in expat-2.1.0-14.el7_9

← Back to latest CVEs