advisories/31057.adv

type: security
subject: Updated expat packages fix security vulnerability
CVE:
 - CVE-2022-43680
src:
  8:
   core:
     - expat-2.2.10-1.6.mga8
description: |
  In libexpat through 2.4.9, there is a use-after free caused by overeager
  destruction of a shared DTD in XML_ExternalEntityParserCreate in
  out-of-memory situations. (CVE-2022-43680)
references:
 - https://bugs.mageia.org/show_bug.cgi?id=31057
 - https://www.debian.org/security/2022/dsa-5266
ID: MGASA-2022-0409
1	type: security
2	subject: Updated expat packages fix security vulnerability
3	CVE:
4	- CVE-2022-43680
5	src:
6	8:
7	core:
8	- expat-2.2.10-1.6.mga8
9	description: \|
10	In libexpat through 2.4.9, there is a use-after free caused by overeager
11	destruction of a shared DTD in XML_ExternalEntityParserCreate in
12	out-of-memory situations. (CVE-2022-43680)
13	references:
14	- https://bugs.mageia.org/show_bug.cgi?id=31057
15	- https://www.debian.org/security/2022/dsa-5266
16	ID: MGASA-2022-0409