RHSA-2022:6832: Important: expat security update
Expat is a C library for parsing XML documents.Security Fix(es): expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the nature of the vulnerability in RHSA-2022:6832?
The vulnerability RHSA-2022:6832 is a use-after-free issue in the doContent function of xmlparse.c in the Expat library.
What is the severity of RHSA-2022:6832?
The severity level of the vulnerability RHSA-2022:6832 is classified as important.
How do I fix RHSA-2022:6832?
To fix RHSA-2022:6832, update the Expat package to version 2.2.5-3.el8_2.3 or later.
Which versions of Expat are affected by RHSA-2022:6832?
Versions prior to 2.2.5-3.el8_2.3 of Expat are affected by the vulnerability RHSA-2022:6832.
Is there any available information regarding RHSA-2022:6832?
Additional information about RHSA-2022:6832 can usually be found in the Red Hat advisory documentation.