Release date:
2026-08-06 09:48:35 UTC
Description:
- CVE-2026-56131: fix use-after-free from calling XML_ResumeParser() inside a
handler by adding handler call depth tracking and rejecting re-entrant calls
- CVE-2026-56407: fix signed integer overflow of entity textLen in doProlog()
for entity values larger than INT_MAX
- CVE-2026-56408: fix integer overflow in copyString() when sizing the
allocation for an over-long encoding name
Updated packages:
-
expat-2.5.0-1.el8.tuxcare.els6.i686.rpm
sha:e9ec20e368921dcdf9afa71308f67ac64faffac93446cfa6ac792030d9a2c185
-
expat-2.5.0-1.el8.tuxcare.els6.x86_64.rpm
sha:c7eda41c86f23fb23b001a986a441ee83e7fb5f38cafafad130de1c819ce2099
-
expat-devel-2.5.0-1.el8.tuxcare.els6.i686.rpm
sha:d53d98a51d7e9fd01f343bd00b4a156c4cdd19bc1b68981ddc6e9763742f0f30
-
expat-devel-2.5.0-1.el8.tuxcare.els6.x86_64.rpm
sha:53aa49c4494ccf23e7eacad1882783717f728764f93c1ef70978e634dc4eb0cd
-
expat-static-2.5.0-1.el8.tuxcare.els6.x86_64.rpm
sha:aa4aa9f681db757aae8514a78918d3db0ef8375dd541fda0385b9ec133d9670c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
