[CLSA-2026:1793864770] expat: Fix of CVE-2026-113351
Type:
security
Severity:
Important
Release date:
2026-11-05 07:46:21 UTC
Description:
- CVE-2026-113351: Expat's allocation tracker did not offset memory already used before XML_ParserReset, skewing amplification limits for later documents on a reused parser
CVEs fixed:
Updated packages:
  • expat-2.5.0-1.el8.tuxcare.els10.i686.rpm
    sha:c48e557b7fddf8c68c4eb1a49ba5fae6b4b24e9bed58a6c4e726073e392e20b7
  • expat-2.5.0-1.el8.tuxcare.els10.x86_64.rpm
    sha:ea88689db699951e63acc43fc8fd9f0aa86c00274f63c8529af3d3a986d57651
  • expat-devel-2.5.0-1.el8.tuxcare.els10.i686.rpm
    sha:ff858da8aece77cf4f9a791930595b64986cb0e2191b54d46f3f75fce89373f5
  • expat-devel-2.5.0-1.el8.tuxcare.els10.x86_64.rpm
    sha:163038a0cd60067fd4a2d46dcea8612f51b2fcbc51c341b80c96e15c7b0b6a48
  • expat-static-2.5.0-1.el8.tuxcare.els10.i686.rpm
    sha:a6d8581f1a2a2883a8bd46ed4647e77fdfe3a87dfdcc49cb91e902d740b1fdb0
  • expat-static-2.5.0-1.el8.tuxcare.els10.x86_64.rpm
    sha:9c02c5f78625b989f57a1ef9b5e7731130f5ac343b3dc7ca1f42e435289ea692
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.