RHBA-2022:4046

Vulnerability from csaf_opensuse - Published: 2022-05-17 00:00 - Updated: 2026-10-11 11:21
Summary
bugfix update for expat
Severity
Low
Notes
Title of the patch: bugfix update for expat
Description of the patch: This bugfix update provides a functional equivalent of RHBA-2022:4046. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHBA-2022:4046.
Patchnames: RHBA-2022:4046
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2021-46143
8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2022-22822
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
CVE-2022-22823
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
CVE-2022-22824
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
CVE-2022-22825
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
CVE-2022-22826
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
CVE-2022-22827
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
CVE-2022-23852
8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
CVE-2022-23990
8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
CVE-2022-25235
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
CVE-2022-25315
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2021-46143
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2021-46143/ self
https://www.suse.com/security/cve/CVE-2022-22822/ self
https://www.suse.com/security/cve/CVE-2022-22823/ self
https://www.suse.com/security/cve/CVE-2022-22824/ self
https://www.suse.com/security/cve/CVE-2022-22825/ self
https://www.suse.com/security/cve/CVE-2022-22826/ self
https://www.suse.com/security/cve/CVE-2022-22827/ self
https://www.suse.com/security/cve/CVE-2022-23852/ self
https://www.suse.com/security/cve/CVE-2022-23990/ self
https://www.suse.com/security/cve/CVE-2022-25235/ self
https://www.suse.com/security/cve/CVE-2022-25315/ self
https://www.suse.com/security/cve/CVE-2021-46143 external
https://bugzilla.suse.com/1194362 external
https://bugzilla.suse.com/1195327 external
https://bugzilla.suse.com/1196387 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://www.suse.com/security/cve/CVE-2022-22822 external
https://bugzilla.suse.com/1194474 external
https://bugzilla.suse.com/1195327 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://www.suse.com/security/cve/CVE-2022-22823 external
https://bugzilla.suse.com/1194476 external
https://bugzilla.suse.com/1195327 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://www.suse.com/security/cve/CVE-2022-22824 external
https://bugzilla.suse.com/1194477 external
https://bugzilla.suse.com/1195327 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://www.suse.com/security/cve/CVE-2022-22825 external
https://bugzilla.suse.com/1194478 external
https://bugzilla.suse.com/1195327 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://www.suse.com/security/cve/CVE-2022-22826 external
https://bugzilla.suse.com/1194479 external
https://bugzilla.suse.com/1195327 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://www.suse.com/security/cve/CVE-2022-22827 external
https://bugzilla.suse.com/1194480 external
https://bugzilla.suse.com/1195327 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://www.suse.com/security/cve/CVE-2022-23852 external
https://bugzilla.suse.com/1195054 external
https://bugzilla.suse.com/1196480 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://www.suse.com/security/cve/CVE-2022-23990 external
https://bugzilla.suse.com/1195217 external
https://bugzilla.suse.com/1196480 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://www.suse.com/security/cve/CVE-2022-25235 external
https://bugzilla.suse.com/1196026 external
https://bugzilla.suse.com/1197217 external
https://bugzilla.suse.com/1198587 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://bugzilla.suse.com/1201735 external
https://www.suse.com/security/cve/CVE-2022-25315 external
https://bugzilla.suse.com/1196171 external
https://bugzilla.suse.com/1197217 external
https://bugzilla.suse.com/1198587 external
https://bugzilla.suse.com/1200038 external
https://bugzilla.suse.com/1200198 external
https://bugzilla.suse.com/1201735 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "bugfix update for expat",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This bugfix update provides a functional equivalent of RHBA-2022:4046.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHBA-2022:4046.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHBA-2022:4046",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhba-2022_4046.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-46143 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-46143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-22822 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-22822/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-22823 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-22823/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-22824 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-22824/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-22825 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-22825/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-22826 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-22826/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-22827 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-22827/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23852 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23852/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23990 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23990/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-25235 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-25235/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-25315 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-25315/"
      }
    ],
    "title": "bugfix update for expat",
    "tracking": {
      "current_release_date": "2026-10-11T11:21:37Z",
      "generator": {
        "date": "2022-05-17T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHBA-2022:4046",
      "initial_release_date": "2022-05-17T00:00:00Z",
      "revision_history": [
        {
          "date": "2022-05-17T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:51:48Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-10-11T11:21:37Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "expat-0:2.2.10-12.el9_0.i686",
                "product": {
                  "name": "expat-0:2.2.10-12.el9_0.i686",
                  "product_id": "expat-0:2.2.10-12.el9_0.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libexpat_project:libexpat:2.2.10:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/expat@2.2.10-12.el9_0?arch=i686\u0026upstream=expat-0:2.2.10-12.el9_0.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "expat-devel-0:2.2.10-12.el9_0.i686",
                "product": {
                  "name": "expat-devel-0:2.2.10-12.el9_0.i686",
                  "product_id": "expat-devel-0:2.2.10-12.el9_0.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/expat-devel@2.2.10-12.el9_0?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "expat-0:2.2.10-12.el9_0.x86_64",
                "product": {
                  "name": "expat-0:2.2.10-12.el9_0.x86_64",
                  "product_id": "expat-0:2.2.10-12.el9_0.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:libexpat_project:libexpat:2.2.10:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/expat@2.2.10-12.el9_0?arch=x86_64\u0026upstream=expat-0:2.2.10-12.el9_0.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "expat-devel-0:2.2.10-12.el9_0.x86_64",
                "product": {
                  "name": "expat-devel-0:2.2.10-12.el9_0.x86_64",
                  "product_id": "expat-devel-0:2.2.10-12.el9_0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/expat-devel@2.2.10-12.el9_0?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 9",
                "product": {
                  "name": "SUSE Liberty Linux 9",
                  "product_id": "SUSE Liberty Linux 9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 9.6 EMS",
                "product": {
                  "name": "SUSE Liberty Linux 9.6 EMS",
                  "product_id": "SUSE Liberty Linux 9.6 EMS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "expat-0:2.2.10-12.el9_0.i686 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686"
        },
        "product_reference": "expat-0:2.2.10-12.el9_0.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "expat-0:2.2.10-12.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64"
        },
        "product_reference": "expat-0:2.2.10-12.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "expat-devel-0:2.2.10-12.el9_0.i686 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686"
        },
        "product_reference": "expat-devel-0:2.2.10-12.el9_0.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "expat-devel-0:2.2.10-12.el9_0.x86_64 as component of SUSE Liberty Linux 9",
          "product_id": "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        },
        "product_reference": "expat-devel-0:2.2.10-12.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "expat-0:2.2.10-12.el9_0.i686 as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686"
        },
        "product_reference": "expat-0:2.2.10-12.el9_0.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "expat-0:2.2.10-12.el9_0.x86_64 as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64"
        },
        "product_reference": "expat-0:2.2.10-12.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "expat-devel-0:2.2.10-12.el9_0.i686 as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686"
        },
        "product_reference": "expat-devel-0:2.2.10-12.el9_0.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "expat-devel-0:2.2.10-12.el9_0.x86_64 as component of SUSE Liberty Linux 9.6 EMS",
          "product_id": "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64"
        },
        "product_reference": "expat-devel-0:2.2.10-12.el9_0.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 9.6 EMS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-46143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-46143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-46143",
          "url": "https://www.suse.com/security/cve/CVE-2021-46143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194362 for CVE-2021-46143",
          "url": "https://bugzilla.suse.com/1194362"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195327 for CVE-2021-46143",
          "url": "https://bugzilla.suse.com/1195327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196387 for CVE-2021-46143",
          "url": "https://bugzilla.suse.com/1196387"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2021-46143",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2021-46143",
          "url": "https://bugzilla.suse.com/1200198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-46143"
    },
    {
      "cve": "CVE-2022-22822",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-22822"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-22822",
          "url": "https://www.suse.com/security/cve/CVE-2022-22822"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194474 for CVE-2022-22822",
          "url": "https://bugzilla.suse.com/1194474"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195327 for CVE-2022-22822",
          "url": "https://bugzilla.suse.com/1195327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-22822",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-22822",
          "url": "https://bugzilla.suse.com/1200198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-22822"
    },
    {
      "cve": "CVE-2022-22823",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-22823"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-22823",
          "url": "https://www.suse.com/security/cve/CVE-2022-22823"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194476 for CVE-2022-22823",
          "url": "https://bugzilla.suse.com/1194476"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195327 for CVE-2022-22823",
          "url": "https://bugzilla.suse.com/1195327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-22823",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-22823",
          "url": "https://bugzilla.suse.com/1200198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-22823"
    },
    {
      "cve": "CVE-2022-22824",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-22824"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-22824",
          "url": "https://www.suse.com/security/cve/CVE-2022-22824"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194477 for CVE-2022-22824",
          "url": "https://bugzilla.suse.com/1194477"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195327 for CVE-2022-22824",
          "url": "https://bugzilla.suse.com/1195327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-22824",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-22824",
          "url": "https://bugzilla.suse.com/1200198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-22824"
    },
    {
      "cve": "CVE-2022-22825",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-22825"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-22825",
          "url": "https://www.suse.com/security/cve/CVE-2022-22825"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194478 for CVE-2022-22825",
          "url": "https://bugzilla.suse.com/1194478"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195327 for CVE-2022-22825",
          "url": "https://bugzilla.suse.com/1195327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-22825",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-22825",
          "url": "https://bugzilla.suse.com/1200198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-22825"
    },
    {
      "cve": "CVE-2022-22826",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-22826"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-22826",
          "url": "https://www.suse.com/security/cve/CVE-2022-22826"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194479 for CVE-2022-22826",
          "url": "https://bugzilla.suse.com/1194479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195327 for CVE-2022-22826",
          "url": "https://bugzilla.suse.com/1195327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-22826",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-22826",
          "url": "https://bugzilla.suse.com/1200198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-22826"
    },
    {
      "cve": "CVE-2022-22827",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-22827"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-22827",
          "url": "https://www.suse.com/security/cve/CVE-2022-22827"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194480 for CVE-2022-22827",
          "url": "https://bugzilla.suse.com/1194480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195327 for CVE-2022-22827",
          "url": "https://bugzilla.suse.com/1195327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-22827",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-22827",
          "url": "https://bugzilla.suse.com/1200198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-22827"
    },
    {
      "cve": "CVE-2022-23852",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23852"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23852",
          "url": "https://www.suse.com/security/cve/CVE-2022-23852"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195054 for CVE-2022-23852",
          "url": "https://bugzilla.suse.com/1195054"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196480 for CVE-2022-23852",
          "url": "https://bugzilla.suse.com/1196480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-23852",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-23852",
          "url": "https://bugzilla.suse.com/1200198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-23852"
    },
    {
      "cve": "CVE-2022-23990",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23990"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23990",
          "url": "https://www.suse.com/security/cve/CVE-2022-23990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195217 for CVE-2022-23990",
          "url": "https://bugzilla.suse.com/1195217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196480 for CVE-2022-23990",
          "url": "https://bugzilla.suse.com/1196480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-23990",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-23990",
          "url": "https://bugzilla.suse.com/1200198"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-23990"
    },
    {
      "cve": "CVE-2022-25235",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-25235"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-25235",
          "url": "https://www.suse.com/security/cve/CVE-2022-25235"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196026 for CVE-2022-25235",
          "url": "https://bugzilla.suse.com/1196026"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197217 for CVE-2022-25235",
          "url": "https://bugzilla.suse.com/1197217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1198587 for CVE-2022-25235",
          "url": "https://bugzilla.suse.com/1198587"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-25235",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-25235",
          "url": "https://bugzilla.suse.com/1200198"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201735 for CVE-2022-25235",
          "url": "https://bugzilla.suse.com/1201735"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-25235"
    },
    {
      "cve": "CVE-2022-25315",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-25315"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
          "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-25315",
          "url": "https://www.suse.com/security/cve/CVE-2022-25315"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196171 for CVE-2022-25315",
          "url": "https://bugzilla.suse.com/1196171"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197217 for CVE-2022-25315",
          "url": "https://bugzilla.suse.com/1197217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1198587 for CVE-2022-25315",
          "url": "https://bugzilla.suse.com/1198587"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200038 for CVE-2022-25315",
          "url": "https://bugzilla.suse.com/1200038"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200198 for CVE-2022-25315",
          "url": "https://bugzilla.suse.com/1200198"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201735 for CVE-2022-25315",
          "url": "https://bugzilla.suse.com/1201735"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9.6 EMS:expat-devel-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-0:2.2.10-12.el9_0.x86_64",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.i686",
            "SUSE Liberty Linux 9:expat-devel-0:2.2.10-12.el9_0.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-05-17T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-25315"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.