RHSA-2020:4484: Moderate: expat security update
Expat is a C library for parsing XML documents.Security Fix(es): expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843) expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:4484?
The severity of RHSA-2020:4484 is classified as important due to potential Denial of Service vulnerabilities and heap-based buffer over-read issues.
How do I fix RHSA-2020:4484?
To fix RHSA-2020:4484, you should upgrade the expat package to version 2.2.5-4.el8 or later.
What vulnerabilities are addressed by RHSA-2020:4484?
RHSA-2020:4484 addresses CVE-2018-20843 and CVE-2019-15903 vulnerabilities in the expat library.
What software is affected by RHSA-2020:4484?
RHSA-2020:4484 affects the expat, expat-debuginfo, expat-debugsource, and expat-devel packages on Red Hat Enterprise Linux 8.
Is there a workaround for RHSA-2020:4484?
There are no specific workarounds for RHSA-2020:4484; the recommended action is to apply the security updates.