Synopsis: Important: expat security update Advisory ID: SLSA-2022:6834-1 Issue Date: 2022-10-06 CVE Numbers: CVE-2022-40674 -- Security Fix(es): * expat: a use-after-free in the doContent function in xmlparse.c (CVE-2022-40674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE -- SL7 x86_64 expat-2.1.0-15.el7_9.i686.rpm expat-2.1.0-15.el7_9.x86_64.rpm expat-debuginfo-2.1.0-15.el7_9.i686.rpm expat-debuginfo-2.1.0-15.el7_9.x86_64.rpm expat-devel-2.1.0-15.el7_9.i686.rpm expat-devel-2.1.0-15.el7_9.x86_64.rpm expat-static-2.1.0-15.el7_9.i686.rpm expat-static-2.1.0-15.el7_9.x86_64.rpm - Scientific Linux Development Team