[CLSA-2026:1786026993] expat: Fix of CVE-2026-56407
Type:
security
Severity:
Important
Release date:
2026-08-06 14:37:01 UTC
Description:
- CVE-2026-56407: prevent signed integer overflow of the entity textLen field by capping the entityValuePool length at INT_MAX in doProlog
CVEs fixed:
Updated packages:
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els4.i686.rpm
    sha:dabcd6a788636deff900667ee68b250c97ece99abada31b76a03da14925ad0d2
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els4.x86_64.rpm
    sha:db194d78e3bb29bf5574190cf0aa578619675707da18cfed96235e129a77064f
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els4.i686.rpm
    sha:040732a80067acbfc56b357cf2bffb8ea421ffaa4f8d3067e89861f12ebde2cc
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els4.x86_64.rpm
    sha:e1385d52d9c91f801a6e952a81cab93ad3568dfcffb66158d4f33ba2b2a6f136
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els4.i686.rpm
    sha:0bce4d68448d1c24a89d673f6f211f4bcfc25a30ccd51a736d379fe063f4da10
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els4.x86_64.rpm
    sha:b82581da1b1eb32052efe2b42113e35301f2b627a5fe709ad8b252bbe5c8a3cf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.