Lucene search

K
almalinuxAlmaLinuxALSA-2020:4484
HistoryNov 03, 2020 - 12:09 p.m.

Moderate: expat security update

2020-11-0312:09:00
errata.almalinux.org
26

0.582 Medium

EPSS

Percentile

97.7%

Expat is a C library for parsing XML documents.

Security Fix(es):

  • expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)

  • expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.