< back to search

gpp_maybe Security update for expat

SUSE-SLE-Micro-6.0-44

This update for expat fixes the following issues: - CVE-2024-45492: detect integer overflow in function nextScaffoldPart (bsc#1229932) - CVE-2024-45491: detect integer overflow in dtdCopy (bsc#1229931) - CVE-2024-45490: reject negative len for XML_ParseBuffer (bsc#1229930) - CVE-2024-28757: XML Entity Expansion attack when there is isolated use of external parsers (bsc#1221289)

Release Date

Feb 3 2025
References

Bugzilla: 1221289, 1229930, 1229931, 1229932
CVEs: CVE-2024-28757, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.0 aarch64

Packages

libexpat1
XML Parser Toolkit

2.5.0-3.1 lock rpm

SUSE Linux Micro 6.0 s390x

Packages

libexpat1
XML Parser Toolkit

2.5.0-3.1 lock rpm

SUSE Linux Micro 6.0 x86_64

Packages

libexpat1
XML Parser Toolkit

2.5.0-3.1 lock rpm

2.5.0-2.188 lock rpm