Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

update: expat #1577

Closed
dongsupark opened this issue Nov 4, 2024 · 0 comments · Fixed by flatcar/scripts#2475
Closed

update: expat #1577

dongsupark opened this issue Nov 4, 2024 · 0 comments · Fixed by flatcar/scripts#2475
Labels
advisory security advisory cvss/MEDIUM >= 4 && < 7 assessed CVSS security security concerns

Comments

@dongsupark
Copy link
Member

dongsupark commented Nov 4, 2024 •
edited
Loading

Name: expat
CVEs: CVE-2024-50602
CVSSs: 5.9 (https://www.cve.org/CVERecord?id=CVE-2024-50602)
Action Needed: TBD, update to >= 2.6.4

Summary: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

See also https://bugzilla.redhat.com/show_bug.cgi?id=2321987, libexpat/libexpat#915.

refmap.gentoo: https://bugs.gentoo.org/942969
@dongsupark dongsupark added security security concerns advisory security advisory labels Nov 4, 2024
@dongsupark dongsupark moved this from 📝 Needs Triage to 🪵Backlog in Flatcar tactical, release planning, and roadmap Nov 4, 2024
@github-actions github-actions bot mentioned this issue Nov 22, 2024
Closed
@dongsupark dongsupark added the cvss/MEDIUM >= 4 && < 7 assessed CVSS label Nov 26, 2024
@krnowak krnowak mentioned this issue Nov 27, 2024
Merged
2 tasks
@github-actions github-actions bot mentioned this issue Dec 22, 2024
Closed
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
advisory security advisory cvss/MEDIUM >= 4 && < 7 assessed CVSS security security concerns
Projects
Flatcar tactical, release planning, and roadmap
Status: Implemented
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Weekly portage-stable package updates 2024-11-25 flatcar/scripts
1 participant
@dongsupark