Release date:
2026-11-11 14:54:47 UTC
Description:
- CVE-2026-72522: fix an out-of-bounds read and infinite loop in the
*_toUtf16 converters by treating only genuine high surrogates as the
first half of a split surrogate pair
- CVE-2026-77214: fix a heap buffer over-read by validating the len passed
to XML_ParseBuffer against the unoccupied capacity of the parse buffer
Updated packages:
-
expat-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:955affba9b858ce15af14134379cb7e369050dc36133b86d2ffc3fd330fa7d8c
-
expat-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:80d98a7568c371355d82be3aad0aad2f4e76313cb74646da470d558d372734b9
-
expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:c56a4616ef8c262018cf45fa3ac11a10fea12480efb0ad29d4e1c29740a50d2a
-
expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:3b241d839f08ff20ee05fa148447f094db5fb4cc5d7b790e1af7dca56f302cba
-
expat-static-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:e1e0ff453cc96db3857531a69fe340530ea83fc4a9d32875502b18811bce8704
-
expat-static-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:c2a5583f1361f66c52ebae241c53a8fde0ec665c4c677327b8e41b83636fc5bd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
