Alpine/expat: critical 9.8

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

Action: Upgrade expat to 2.4.5-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-25315#Alpine:v3.22/expat
• https://security.alpinelinux.org/vuln/CVE-2022-25315

published 2022-02-18T05:15:08.237Z · modified 2026-10-15T07:17:54.175050479Z · JSON