Release date:
2026-08-06 09:43:10 UTC
Description:
- CVE-2026-56131: fix use-after-free from calling XML_ResumeParser() inside a
handler by adding handler call depth tracking and rejecting re-entrant calls
- CVE-2026-56407: fix signed integer overflow of entity textLen in doProlog()
for entity values larger than INT_MAX
- CVE-2026-56408: fix integer overflow in copyString() when sizing the
allocation for an over-long encoding name
Updated packages:
-
expat-2.5.0-1.el8.tuxcare.els6.i686.rpm
sha:afaab8778425ecf3b691648f93fce8900c8b9e9b3992f401d72d978c3099c596
-
expat-2.5.0-1.el8.tuxcare.els6.x86_64.rpm
sha:d02e7d4e6d15a8edf62581b71bfa0696f5feef42475b3c716816de4847c6d88b
-
expat-devel-2.5.0-1.el8.tuxcare.els6.i686.rpm
sha:8067cd4378b5faa27ff76662b7373fb514ee6cafe823ea557be146eb63658f92
-
expat-devel-2.5.0-1.el8.tuxcare.els6.x86_64.rpm
sha:c0931761441871551cad44ceb9d88c021d85af4c578ba92e080d01ffe389cfd7
-
expat-static-2.5.0-1.el8.tuxcare.els6.x86_64.rpm
sha:c5d20450fadcc51894fa094b4b0434ca5e6058595987b78d2c9bcf70af89e8a8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
