gpp_maybe Security update for expat

SUSE-SLE-SERVER-12-SP5-2022-698

This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025). - CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026). - CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168). - CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169). - CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171).

• Release Date
  Mar 3 2022
• References
  Bugzilla: 1196171, 1196169, 1196025, 1196168, 1196026
  CVEs: CVE-2022-25315, CVE-2022-25236, CVE-2022-25313, CVE-2022-25235, CVE-2022-25314
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  expat
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm lock src

  libexpat1
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm

SUSE Linux Enterprise Server 12.5 s390x

• Packages
  expat
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm lock src

  libexpat1
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm

  libexpat1-32bit
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  expat
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm lock src

  libexpat1
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm

  libexpat1-32bit
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm

SUSE Linux Enterprise Server 12.5 ppc64le

• Packages
  expat
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm lock src

  libexpat1
  XML Parser Toolkit

  2.1.0-21.18.1 lock rpm