< back to search

shield Security update for expat

SUSE-SLE-Micro-5.4-2024-3216

This update for expat fixes the following issues: - CVE-2024-45492: integer overflow in function nextScaffoldPart. (bsc#1229932) - CVE-2024-45491: integer overflow in dtdCopy. (bsc#1229931) - CVE-2024-45490: negative length for XML_ParseBuffer not rejected. (bsc#1229930)

Release Date

Sep 12 2024
References

Bugzilla: 1229932, 1229931, 1229930
CVEs: CVE-2024-45492, CVE-2024-45491, CVE-2024-45490
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.4 aarch64

Packages

expat
XML Parser Toolkit

2.4.4-150400.3.22.1 lock src

libexpat1
XML Parser Toolkit

2.4.4-150400.3.22.1 lock rpm

SUSE Linux Enterprise Micro 5.4 s390x

Packages

expat
XML Parser Toolkit

2.4.4-150400.3.22.1 lock src

libexpat1
XML Parser Toolkit

2.4.4-150400.3.22.1 lock rpm

SUSE Linux Enterprise Micro 5.4 x86_64

Packages

expat
XML Parser Toolkit

2.4.4-150400.3.22.1 lock src

libexpat1
XML Parser Toolkit

2.4.4-150400.3.22.1 lock rpm