Release date:
2026-08-06 09:50:55 UTC
Description:
- CVE-2026-56131: fix use-after-free from calling XML_ResumeParser() inside a
handler by adding handler call depth tracking and rejecting re-entrant calls
- CVE-2026-56407: fix signed integer overflow of entity textLen in doProlog()
for entity values larger than INT_MAX
- CVE-2026-56408: fix integer overflow in copyString() when sizing the
allocation for an over-long encoding name
Updated packages:
-
expat-2.5.0-1.el8.tuxcare.els6.i686.rpm
sha:c5f3c922828aa98ed1d10dc3aaec9da94d2a4b15556f98c9cb329466bbdb2c18
-
expat-2.5.0-1.el8.tuxcare.els6.x86_64.rpm
sha:cace2a177dcdb8d8f162997538de25e365cf401300749f7976bc44712bd29f41
-
expat-devel-2.5.0-1.el8.tuxcare.els6.i686.rpm
sha:7d1669c57149b0ad9544b2f6a65bf76eaa80e5964871a0dc51cd2fd24c704382
-
expat-devel-2.5.0-1.el8.tuxcare.els6.x86_64.rpm
sha:7663e9df9103c3153d5c4fe0ee79dd0d6ac8ec81bd973304a1aa79c8b86ed881
-
expat-static-2.5.0-1.el8.tuxcare.els6.x86_64.rpm
sha:b2a0ab1be8528bbd68f1227423504a229409421e342c6d661ed316f83c813449
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
