[CLSA-2024:1726163188] Fix CVE(s): CVE-2024-45491, CVE-2024-45492

Type:

security

Severity:

Critical

Release date:

2024-09-12 17:46:31 UTC

Description:

   * SECURITY UPDATE: integer overflow
     - debian/patches/CVE-2024-45491.patch: prevent integer overflow
       in dtdCopy
     - CVE-2024-45491
   * SECURITY UPDATE: integer overflow
     - debian/patches/CVE-2024-45492.patch: prevent integer overflow
       in nextScaffoldPart
     - CVE-2024-45492

Updated packages:

expat_2.2.5-3ubuntu0.9+tuxcare.els2_amd64.deb
sha:4376c8f53c52fec38ebca9f2e1f5bde77aeca40d
libexpat1_2.2.5-3ubuntu0.9+tuxcare.els2_amd64.deb
sha:5c0967f8bee7508e2740ab0be4afbf0de8f6d085
libexpat1-dev_2.2.5-3ubuntu0.9+tuxcare.els2_amd64.deb
sha:2fc41288f791b0b20fb08009618f0dc6d514c131

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.