Lucene search

K
osvGoogleOSV:ALSA-2020:4846
HistoryNov 03, 2020 - 12:41 p.m.

Moderate: mingw-expat security update

2020-11-0312:41:03
Google
osv.dev
3

0.582 Medium

EPSS

Percentile

97.7%

Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW.

Security Fix(es):

  • expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.