Oracle alert ELSA-2024-6989 (expat)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2024-6989 Moderate: Oracle Linux 8 expat security update | |
| Date: | Thu, 26 Sep 2024 23:04:11 -0700 | |
| Message-ID: | <mailman.255.1727417060.6358.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2024-6989 http://linux.oracle.com/errata/ELSA-2024-6989.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: expat-2.2.5-15.0.1.el8_10.i686.rpm expat-2.2.5-15.0.1.el8_10.x86_64.rpm expat-devel-2.2.5-15.0.1.el8_10.i686.rpm expat-devel-2.2.5-15.0.1.el8_10.x86_64.rpm aarch64: expat-2.2.5-15.0.1.el8_10.aarch64.rpm expat-devel-2.2.5-15.0.1.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//expat-2.2.5-15.0... Related CVEs: CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 Description of changes: [2.2.5-15.0.1] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-15] - Rebuild for test reconfiguration [2.2.5-14] - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata