Oval Definition:	oval:org.opensuse.security:def:99476
Revision Date: 2022-01-25 Version: 1 Title: (Important) Description: This update for expat fixes the following issues: - CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251). - CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362). - CVE-2022-22822: Fixed integer overflow in addBinding in xmlparse.c (bsc#1194474). - CVE-2022-22823: Fixed integer overflow in build_model in xmlparse.c (bsc#1194476). - CVE-2022-22824: Fixed integer overflow in defineAttribute in xmlparse.c (bsc#1194477). - CVE-2022-22825: Fixed integer overflow in lookup in xmlparse.c (bsc#1194478). - CVE-2022-22826: Fixed integer overflow in nextScaffoldPart in xmlparse.c (bsc#1194479). - CVE-2022-22827: Fixed integer overflow in storeAtts in xmlparse.c (bsc#1194480). Family: unix Class: patch Status: Reference(s): 1177158 1194251 1194362 1194474 1194476 1194477 1194478 1194479 1194480 CVE-2020-14355 CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 SUSE-SU-2021:1928-1 Platform(s): Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM SUSE Linux Enterprise Server 15 SP1-LTSS Product(s): Definition Synopsis Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM is installed AND libexpat1-2.2.5-3.9.1 is installed Definition Synopsis SUSE Linux Enterprise Server 15 SP1-LTSS is installed AND Package Information libspice-client-glib-2_0-8-0.35-3.3.1 is installed OR libspice-client-glib-helper-0.35-3.3.1 is installed OR libspice-client-gtk-3_0-5-0.35-3.3.1 is installed OR spice-gtk-devel-0.35-3.3.1 is installed OR typelib-1_0-SpiceClientGlib-2_0-0.35-3.3.1 is installed OR typelib-1_0-SpiceClientGtk-3_0-0.35-3.3.1 is installed
BACK