p PatchFirst

RLSA-2022:6838

RLSA-2022:6838 · Important: expat security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Expat is a C library for parsing XML documents. Security Fix(es): * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 8.1 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • expat Rocky Linux:9

    Affected ranges
    • ECOSYSTEM: < 0:2.2.10-12.el9_0.3

    Update to 0:2.2.10-12.el9_0.3

Original sources

Check your server →