Oval Definition:	oval:org.opensuse.security:def:118904
Revision Date: 2022-01-25 Version: 1 Title: Security update for expat (Important) Description: This update for expat fixes the following issues: - CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251). - CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362). - CVE-2022-22822: Fixed integer overflow in addBinding in xmlparse.c (bsc#1194474). - CVE-2022-22823: Fixed integer overflow in build_model in xmlparse.c (bsc#1194476). - CVE-2022-22824: Fixed integer overflow in defineAttribute in xmlparse.c (bsc#1194477). - CVE-2022-22825: Fixed integer overflow in lookup in xmlparse.c (bsc#1194478). - CVE-2022-22826: Fixed integer overflow in nextScaffoldPart in xmlparse.c (bsc#1194479). - CVE-2022-22827: Fixed integer overflow in storeAtts in xmlparse.c (bsc#1194480). Family: unix Class: patch Status: Reference(s): 1194251 1194362 1194474 1194476 1194477 1194478 1194479 1194480 CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 SUSE-SU-2022:0178-1 Platform(s): SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS Product(s): Definition Synopsis SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS is installed AND Package Information expat-2.2.5-3.9.1 is installed OR libexpat-devel-2.2.5-3.9.1 is installed OR libexpat1-2.2.5-3.9.1 is installed OR libexpat1-32bit-2.2.5-3.9.1 is installed
BACK