[Apollo] Advisories Statistics light light Login

RLSA-2024:6989

Security Mirrored from RHSA-2024:6989
Issued at: 2024-09-30
Updated at: 2024-09-30

Synopsis

Moderate: expat security update



Description

Expat is a C library for parsing XML documents.

Security Fix(es):

* libexpat: Negative Length Parsing Vulnerability in libexpat (CVE-2024-45490)

* libexpat: Integer Overflow or Wraparound (CVE-2024-45491)

* libexpat: integer overflow (CVE-2024-45492)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2308615 2308616 2308617

CVEs

CVE-2024-45490 CVE-2024-45491 CVE-2024-45492

Affected packages

Rocky Linux 8 aarch64 - BaseOS

expat-0:2.2.5-15.el8_10.aarch64.rpm expat-0:2.2.5-15.el8_10.src.rpm expat-debuginfo-0:2.2.5-15.el8_10.aarch64.rpm expat-debugsource-0:2.2.5-15.el8_10.aarch64.rpm expat-devel-0:2.2.5-15.el8_10.aarch64.rpm

Rocky Linux 8 x86_64 - BaseOS

expat-0:2.2.5-15.el8_10.i686.rpm expat-0:2.2.5-15.el8_10.src.rpm expat-0:2.2.5-15.el8_10.x86_64.rpm expat-debuginfo-0:2.2.5-15.el8_10.i686.rpm expat-debuginfo-0:2.2.5-15.el8_10.x86_64.rpm expat-debugsource-0:2.2.5-15.el8_10.i686.rpm expat-debugsource-0:2.2.5-15.el8_10.x86_64.rpm expat-devel-0:2.2.5-15.el8_10.i686.rpm expat-devel-0:2.2.5-15.el8_10.x86_64.rpm