Oracle alert ELSA-2022-9359 (expat)

From:
             
 
Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com>
To:
             
 
el-errata@oss.oracle.com
Subject:
             
 
[El-errata] ELSA-2022-9359 Important: Oracle Linux 6 Extended Lifecycle Support (ELS) expat security update
Date:
             
 
Mon, 09 May 2022 10:12:02 -0700
Message-ID:
             
 
<mailman.135.1652116336.13553.el-errata@oss.oracle.com>
Oracle Linux Security Advisory ELSA-2022-9359

http://linux.oracle.com/errata/ELSA-2022-9359.html

The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded
to the Unbreakable Linux Network:

i386:
expat-2.0.1-13.0.1.el6_8.i686.rpm
expat-devel-2.0.1-13.0.1.el6_8.i686.rpm

x86_64:
expat-2.0.1-13.0.1.el6_8.i686.rpm
expat-2.0.1-13.0.1.el6_8.x86_64.rpm
expat-devel-2.0.1-13.0.1.el6_8.i686.rpm
expat-devel-2.0.1-13.0.1.el6_8.x86_64.rpm



Related CVEs:

CVE-2022-25315
CVE-2022-25235
CVE-2022-25236




Description of changes:

[2.0.1-13.0.1]
- Prevent integer overflow in storeRawNames [CVE-2022-25315][Orabug: 34059442]
- Add missing validation of encoding [CVE-2022-25235][Orabug: 34059442]
- Protect against malicious namespace declarations [CVE-2022-25236][Orabug: 34059442]


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata