Description:
- CVE-2022-25236: Fix insertion of namespace-separator characters into
namespace URIs
- CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to
arbitrary code execution
- CVE-2022-25315: Fix integer overflow in storeRawNames()
- CVE-2022-22822: Fix integer overflow in addBinding()
- CVE-2022-22823: Fix integer overflow in build_model()
- CVE-2022-22824: Fix integer overflow in defineAttribute()
- CVE-2022-22825: Fix integer overflow in lookup()
- CVE-2022-22826: Fix integer overflow in nextScaffoldPart()
- CVE-2022-22827: Fix integer overflow in storeAtts()
- CVE-2022-23852: Fix integer overflow in XML_GetBuffer()
- CVE-2021-46143: Fix integer overflow on m_groupSize in doProlog()
- CVE-2021-45960: Fix troublesome left shifts in storeAtts()
- CVE-2022-23990: Fix integer overflow in doProlog()
Updated packages:
-
expat-devel-2.0.1-13.el6_8.tuxcare.els1.x86_64.rpm
sha:dfe2668d2bf1bf611e9f55629380af7dd2cf7547
-
expat-2.0.1-13.el6_8.tuxcare.els1.x86_64.rpm
sha:48223a82ba1acc85408c6d8a544df8fb097e123b
-
expat-2.0.1-13.el6_8.tuxcare.els1.i686.rpm
sha:f303b453eaff6adb0abeb69addadaa3ab3fd044d
-
expat-devel-2.0.1-13.el6_8.tuxcare.els1.i686.rpm
sha:b07248fbd97219570a8a55900f113e5c0af2dc5f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.