An XML parser library
Go to file
Tomas Korbar 6c4005223e Fix multiple CVEs
CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
CVE-2022-25315 expat: integer overflow in storeRawNames()
Resolves: CVE-2022-25236
Resolves: CVE-2022-25235
Resolves: CVE-2022-25315
2022-03-02 12:27:09 +01:00
tests CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat 2022-02-10 13:59:03 +01:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-11-16 12:55:59 -08:00
expat-2.2.10-Add-missing-validation-of-encoding.patch Fix multiple CVEs 2022-03-02 12:27:09 +01:00
expat-2.2.10-Detect-and-prevent-integer-overflow-in-XML_GetBuffer.patch CVE-2022-23852 expat: integer overflow in function XML_GetBuffer 2022-02-10 14:17:38 +01:00
expat-2.2.10-Detect-and-prevent-troublesome-left-shifts.patch CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat 2022-02-10 13:59:03 +01:00
expat-2.2.10-prevent-integer-overflow-in-doProlog.patch CVE-2022-23990 expat: integer overflow in the doProlog function 2022-02-07 12:39:27 +01:00
expat-2.2.10-Prevent-integer-overflow-in-storeRawNames.patch Fix multiple CVEs 2022-03-02 12:27:09 +01:00
expat-2.2.10-Prevent-integer-overflow-on-m_groupSize-in-function.patch CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c 2022-02-09 15:04:56 +01:00
expat-2.2.10-Prevent-more-integer-overflows.patch CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c 2022-02-09 13:27:16 +01:00
expat-2.2.10-Protect-against-malicious-namespace-declarations.patch Fix multiple CVEs 2022-03-02 12:27:09 +01:00
expat.spec Fix multiple CVEs 2022-03-02 12:27:09 +01:00
gating.yaml Batch update to add gating.yaml. 2021-08-06 10:03:10 +01:00
sources RHEL 9.0.0 Alpha bootstrap 2020-11-16 12:55:59 -08:00