Release date:
2026-11-09 23:47:37 UTC
Description:
* SECURITY UPDATE: NULL pointer dereference in externalEntityInitProcessor2 on initial empty non-final subparser input
- debian/patches/CVE-2026-117610.patch: NULL pointer dereference in externalEntityInitProcessor2 on initial empty non-final subparser input
- CVE-2026-117610
* SECURITY UPDATE: signed integer overflow of attIndex/nPrefixes in storeAtts
- debian/patches/CVE-2026-118370.patch: signed integer overflow of attIndex/nPrefixes in storeAtts
- CVE-2026-118370
Updated packages:
-
expat_2.2.10-2+deb11u7+tuxcare.els6_amd64.deb
sha:68b983a60b036b7650a4945e0e0cfcc510951fca
-
libexpat1_2.2.10-2+deb11u7+tuxcare.els6_amd64.deb
sha:531609596ec6bc2f0c196d3e8a67f63d6dd55776
-
libexpat1-dev_2.2.10-2+deb11u7+tuxcare.els6_amd64.deb
sha:861a4fd5b36321f9be5e9bc543fd4bf9bf66727f
-
expat_2.2.10-2+deb11u7+tuxcare.els6_arm64.deb
sha:00e2b170cdd91349e6c883ed5863c5763ae371c4
-
libexpat1_2.2.10-2+deb11u7+tuxcare.els6_arm64.deb
sha:fd06ad649094af7f0082ce145783bffe8725095a
-
libexpat1-dev_2.2.10-2+deb11u7+tuxcare.els6_arm64.deb
sha:3027d307bc70142b0215a69f33d5c55f2d20bc53
-
expat_2.2.10-2+deb11u7+tuxcare.els6_armel.deb
sha:3f97cb692431fde84185e3105f2c092947fc10df
-
libexpat1_2.2.10-2+deb11u7+tuxcare.els6_armel.deb
sha:b38ec14c92af1b7445a38fd4d997b874011315cc
-
libexpat1-dev_2.2.10-2+deb11u7+tuxcare.els6_armel.deb
sha:fca6e1509e912500eafd101fa44bc22d3731738e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
