Advisories » MGASA-2019-0274

Updated expat packages fix security vulnerability

Publication date: 15 Sep 2019
Modification date: 15 Sep 2019
Type: security
Affected Mageia releases : 6 , 7
CVE: CVE-2018-20843

Description

Updated expat packages fix security vulnerability:

It was discovered that Expat did not properly handled XML input including
XML names that contain a large number of colons, potentially resulting in
denial of service (CVE-2018-20843).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=25019
• https://github.com/libexpat/libexpat/blob/R_2_2_7/expat/Changes
• https://www.debian.org/security/2019/dsa-4472
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20843

SRPMS

7/core

• expat-2.2.7-1.mga7

6/core

• expat-2.2.7-1.mga6