Red Hat Product Errata RHSA-2024:6989 - Security Advisory
Issued:
2024-09-24
Updated:
2024-09-24

RHSA-2024:6989 - Security Advisory

Synopsis

Moderate: expat security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for expat is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Expat is a C library for parsing XML documents.

Security Fix(es):

  • libexpat: Negative Length Parsing Vulnerability in libexpat (CVE-2024-45490)
  • libexpat: Integer Overflow or Wraparound (CVE-2024-45491)
  • libexpat: integer overflow (CVE-2024-45492)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

  • BZ - 2308615 - CVE-2024-45490 libexpat: Negative Length Parsing Vulnerability in libexpat
  • BZ - 2308616 - CVE-2024-45491 libexpat: Integer Overflow or Wraparound
  • BZ - 2308617 - CVE-2024-45492 libexpat: integer overflow

Red Hat Enterprise Linux for x86_64 8

SRPM
expat-2.2.5-15.el8_10.src.rpm SHA-256: d1dd7838a482f0ca178bacd7d6cb515d70394eb8656a8e4970a5c186d3a14aea
x86_64
expat-2.2.5-15.el8_10.i686.rpm SHA-256: 615c5b1ab17cb32b7709e8d73dbcd88f7feeda1289e34f80f998af8d8035ca9d
expat-2.2.5-15.el8_10.x86_64.rpm SHA-256: 1ae9138f9947f182ad077393c16522941bce2f225eee687a0387f0f71c416bc0
expat-debuginfo-2.2.5-15.el8_10.i686.rpm SHA-256: 05bf3df5c914016ec2d8888ead563a650cd90dc7eb9e62909ccaa36f8ea73b9d
expat-debuginfo-2.2.5-15.el8_10.x86_64.rpm SHA-256: 89c3c282f89baca52dcea93ee396a114349830eafb3ec995472bbfc01902071d
expat-debugsource-2.2.5-15.el8_10.i686.rpm SHA-256: 19fc08aeb20dcd24d2036ae0d2e558fc5eb8dffec35cec2e1ace5ac2b76faebe
expat-debugsource-2.2.5-15.el8_10.x86_64.rpm SHA-256: 9856fc93d7f36b1a41b164ab727f999abd960b7a08411e1009ebb9cbd11c2438
expat-devel-2.2.5-15.el8_10.i686.rpm SHA-256: fea06f2d790e84fee2f767a64cf83a07621677ddcac3141ad25e8b5cad8abe8f
expat-devel-2.2.5-15.el8_10.x86_64.rpm SHA-256: c10ccb5a22249f55a632bce089023bb692973b0cf14a9ebe7c06e03770f8b3ee

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
expat-2.2.5-15.el8_10.src.rpm SHA-256: d1dd7838a482f0ca178bacd7d6cb515d70394eb8656a8e4970a5c186d3a14aea
s390x
expat-2.2.5-15.el8_10.s390x.rpm SHA-256: d039bd19afae9f425600e1a4e27c161ca8b590e369837578a067d4d620dc8560
expat-debuginfo-2.2.5-15.el8_10.s390x.rpm SHA-256: 6a3dd68cf1d96a078f3dd0020971c6f1e00954ba6a7858b3ab408a9b86859b7f
expat-debugsource-2.2.5-15.el8_10.s390x.rpm SHA-256: 8ad640e0fd794e9c2a984436d870d6ec9e82622dcf040544459dd4f0dbd8d7ef
expat-devel-2.2.5-15.el8_10.s390x.rpm SHA-256: 819601ac1891872c02c2fb9a2998c96e4a7ac921aec23f2059725c9b38f468e5

Red Hat Enterprise Linux for Power, little endian 8

SRPM
expat-2.2.5-15.el8_10.src.rpm SHA-256: d1dd7838a482f0ca178bacd7d6cb515d70394eb8656a8e4970a5c186d3a14aea
ppc64le
expat-2.2.5-15.el8_10.ppc64le.rpm SHA-256: 439fb702b184ed33df53857ab4b330686661cb09d08a0798c170164020709515
expat-debuginfo-2.2.5-15.el8_10.ppc64le.rpm SHA-256: 8569b0b5c953534ffaafd8805c0cefed5b617db363d4beaf724156cb45746d90
expat-debugsource-2.2.5-15.el8_10.ppc64le.rpm SHA-256: 961cf246eab18ee278e74b38d97bb1f11675552ef27342ec8984bc4989d6416c
expat-devel-2.2.5-15.el8_10.ppc64le.rpm SHA-256: 855b5c5f30e6305362638491fbba2916538c629cb5701e4299d69ec0e25a84b9

Red Hat Enterprise Linux for ARM 64 8

SRPM
expat-2.2.5-15.el8_10.src.rpm SHA-256: d1dd7838a482f0ca178bacd7d6cb515d70394eb8656a8e4970a5c186d3a14aea
aarch64
expat-2.2.5-15.el8_10.aarch64.rpm SHA-256: 5a7ce5493dd70f4cababe54329b44d2b15e4e1acb826b9a4d1acf24e8f7bba8d
expat-debuginfo-2.2.5-15.el8_10.aarch64.rpm SHA-256: ccd8835166de67dbfe5e33e870b9a1882cde268d44e18b8f72ceb7581f3d3d2f
expat-debugsource-2.2.5-15.el8_10.aarch64.rpm SHA-256: 5d0da2f9cbce4df0afed96e4b34f8b15b3fd494d48631e84c595aa16d687518c
expat-devel-2.2.5-15.el8_10.aarch64.rpm SHA-256: 110609be5a8f9c76d184f94156fb22f113b6d63fac0ef7dce3f7efb3e16a0fd5

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.