RHSA-2022:1309: CVEs fixed (Red Hat)

RHSA-2022:1309 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2022-25315 CRITICAL 9.8 UPGRADE MITIGATE In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
• CVE-2022-25236 CRITICAL 9.8 UPGRADE MITIGATE xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into

Applies to

• RHEL 6 Extended Lifecycle Support · fixed in expat-2.0.1-14.el6_10

← Back to latest CVEs