Test ID:	1.3.6.1.4.1.25623.1.0.876566
Category:	Fedora Local Security Checks
Title:	Fedora Update for expat FEDORA-2019-18868e1715
Summary:	The remote host is missing an update for the 'expat'; package(s) announced via the FEDORA-2019-18868e1715 advisory.
Description:	Summary: The remote host is missing an update for the 'expat' package(s) announced via the FEDORA-2019-18868e1715 advisory. Vulnerability Insight: This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parsed. A start tag is an example of the kind of structures for which you may register handlers. Affected Software/OS: 'expat' package(s) on Fedora 30. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-20843 Bugtraq: 20190628 [SECURITY] [DSA 4472-1] expat security update (Google Search) https://seclists.org/bugtraq/2019/Jun/39 https://security.netapp.com/advisory/ntap-20190703-0001/ https://support.f5.com/csp/article/K51011533 https://www.tenable.com/security/tns-2021-11 Debian Security Information: DSA-4472 (Google Search) https://www.debian.org/security/2019/dsa-4472 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IDAUGEB3TUP6NEKJDBUBZX7N5OAUOOOK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CEJJSQSG3KSUQY4FPVHZ7ZTT7FORMFVD/ https://security.gentoo.org/glsa/201911-08 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5226 https://github.com/libexpat/libexpat/blob/R_2_2_7/expat/Changes https://github.com/libexpat/libexpat/issues/186 https://github.com/libexpat/libexpat/pull/262 https://github.com/libexpat/libexpat/pull/262/commits/11f8838bf99ea0a6f0b76f9760c43704d00c4ff6 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/security-alerts/cpuoct2021.html https://lists.debian.org/debian-lts-announce/2019/06/msg00028.html SuSE Security Announcement: openSUSE-SU-2019:1777 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00039.html https://usn.ubuntu.com/4040-1/ https://usn.ubuntu.com/4040-2/
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.