Oval Definition:	oval:org.opensuse.security:def:100067
Revision Date: 2022-01-25 Version: 1 Title: (Important) Description: This update for expat fixes the following issues: - CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251). - CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362). - CVE-2022-22822: Fixed integer overflow in addBinding in xmlparse.c (bsc#1194474). - CVE-2022-22823: Fixed integer overflow in build_model in xmlparse.c (bsc#1194476). - CVE-2022-22824: Fixed integer overflow in defineAttribute in xmlparse.c (bsc#1194477). - CVE-2022-22825: Fixed integer overflow in lookup in xmlparse.c (bsc#1194478). - CVE-2022-22826: Fixed integer overflow in nextScaffoldPart in xmlparse.c (bsc#1194479). - CVE-2022-22827: Fixed integer overflow in storeAtts in xmlparse.c (bsc#1194480). Family: unix Class: patch Status: Reference(s): 1190265 1194251 1194362 1194474 1194476 1194477 1194478 1194479 1194480 CVE-2021-21996 CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 SUSE-SU-2021:3555-1 Platform(s): Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure SUSE Enterprise Storage 6 Product(s): Definition Synopsis Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure is installed AND libexpat1-2.2.5-3.9.1 is installed Definition Synopsis SUSE Enterprise Storage 6 is installed AND Package Information python3-salt-3002.2-48.4 is installed OR salt-3002.2-48.4 is installed OR salt-api-3002.2-48.4 is installed OR salt-bash-completion-3002.2-48.4 is installed OR salt-cloud-3002.2-48.4 is installed OR salt-doc-3002.2-48.4 is installed OR salt-fish-completion-3002.2-48.4 is installed OR salt-master-3002.2-48.4 is installed OR salt-minion-3002.2-48.4 is installed OR salt-proxy-3002.2-48.4 is installed OR salt-ssh-3002.2-48.4 is installed OR salt-standalone-formulas-configuration-3002.2-48.4 is installed OR salt-syndic-3002.2-48.4 is installed OR salt-transactional-update-3002.2-48.4 is installed OR salt-zsh-completion-3002.2-48.4 is installed
BACK