Scientific Linux alert SLSA-2020:1011-1 (expat)

From:
             
 
Farhan Ahmed <fahmed@fnal.gov> 
To:
             
 
scientific-linux-errata@listserv.fnal.gov 
Subject:
             
 
Security ERRATA Moderate: expat on SL7.x x86_64 
Date:
             
 
Mon, 20 Apr 2020 16:38:50 -0000
Message-ID:
             
 
<20200420163850.21965.95160@slpackages.fnal.gov>
Synopsis:          Moderate: expat security update
Advisory ID:       SLSA-2020:1011-1
Issue Date:        2020-04-07
CVE Numbers:       CVE-2015-2716
--

* expat: Integer overflow leading to buffer overflow in XML_GetBuffer()
--

SL7
  x86_64
    expat-devel-2.1.0-11.el7.x86_64.rpm
    expat-2.1.0-11.el7.x86_64.rpm
    expat-2.1.0-11.el7.i686.rpm
    expat-devel-2.1.0-11.el7.i686.rpm
    expat-debuginfo-2.1.0-11.el7.i686.rpm
    expat-debuginfo-2.1.0-11.el7.x86_64.rpm
    expat-static-2.1.0-11.el7.i686.rpm
    expat-static-2.1.0-11.el7.x86_64.rpm

- Scientific Linux Development Team