RHSA-2020:4846: Moderate: mingw-expat security update
Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW. Security Fix(es): expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:4846?
The severity of RHSA-2020:4846 is classified as moderate.
How do I fix RHSA-2020:4846?
To fix RHSA-2020:4846, update the affected packages to version 2.2.4-5.el8 or later.
Which packages are affected by RHSA-2020:4846?
The affected packages for RHSA-2020:4846 include mingw-expat, mingw32-expat, and mingw64-expat.
What vulnerability is addressed by RHSA-2020:4846?
RHSA-2020:4846 addresses a denial of service (DoS) vulnerability caused by a large number of colons in XML input.
Is there a specific version I need to update to for RHSA-2020:4846?
Yes, you need to update to version 2.2.4-5.el8 to address RHSA-2020:4846.