Threats Tagged 'cve-2024-45492'

Users of service-interconnect 1.5 rhel9 container images are advised to upgrade to these updated images, which contain backported patches to correct security issues and fix bugs. Users of these images are also encouraged to rebuild all container images that depend on these images. You can find images updated by this advisory the in Red Hat Container Catalog

Users of service-interconnect 1.4 LTS rhel9 container images are advised to upgrade to these updated images, which contain backported patches to correct security issues and fix bugs. Users of these images are also encouraged to rebuild all container images that depend on these images. You can find images updated by this advisory the in Red Hat Container Catalog

Red Hat OpenShift Container Platform 4.17.5 includes security updates addressing three vulnerabilities in the libexpat library: a negative length parsing vulnerability (CVE-2024-45490) and two integer overflow issues (CVE-2024-45491 and CVE-2024-45492). These vulnerabilities have been rated with moderate severity by Red Hat Product Security. The update is available as container images and RPM packages, and users are advised to upgrade their OpenShift 4.17 clusters accordingly. Detailed upgrade instructions and release notes are provided by Red Hat.

Users of service-interconnect 1.4 LTS rhel9 container images are advised to upgrade to these updated images, which contain backported patches to correct security issues and fix bugs. Users of these images are also encouraged to rebuild all container images that depend on these images. You can find images updated by this advisory the in Red Hat Container Catalog

Red Hat has issued a security advisory for the expat C library used for parsing XML documents, addressing three vulnerabilities: a negative length parsing vulnerability (CVE-2024-45490) and two integer overflow issues (CVE-2024-45491 and CVE-2024-45492). These vulnerabilities have been rated with moderate security impact. The advisory provides updated packages for Red Hat Enterprise Linux 8 and its Extended Life Cycle versions across multiple architectures. Users are advised to apply the provided updates to mitigate these issues.

Multiple security vulnerabilities have been identified in the libexpat XML parsing library used in Red Hat Enterprise Linux 9. These include a negative length parsing vulnerability and integer overflow issues. The vulnerabilities have been rated with moderate severity by Red Hat Product Security. Updates addressing these issues are available for Red Hat Enterprise Linux 9 across various architectures including x86_64, aarch64, s390x, and ppc64le. Users are advised to apply the provided security updates to mitigate these vulnerabilities.

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).