Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.Test your applications
- Snyk ID SNYK-CENTOS8-EXPAT-3104723
- published 4 Nov 2022
- disclosed 24 Oct 2022
How to fix?
expat to version 0:2.2.5-10.el8_7.1 or higher.
Note: Versions mentioned in the description apply only to the upstream
expat package and not the
expat package as distributed by
How to fix? for
Centos:8 relevant fixed versions and status.
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.