Release date:
2026-11-09 10:29:05 UTC
Description:
- CVE-2026-72522: fix an out-of-bounds read and infinite loop in the
*_toUtf16 converters by treating only genuine high surrogates as the
first half of a split surrogate pair
- CVE-2026-77214: fix a heap buffer over-read by validating the len passed
to XML_ParseBuffer against the unoccupied capacity of the parse buffer
Updated packages:
-
expat-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:5aca0624f43ee0c87e688a60f26c01967806ceb71f32ce799facf3e27fe41257
-
expat-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:33468ebd056266375e3f5010cbcb7597733aa55b69c4f2b5ba5d2206a97019cc
-
expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:d24fbba2763241f786122563ef6afc1ef5aae0315c156b9ee0172305c3b54bf7
-
expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:c4a1aa119e6ec3e121a2923d1bbf534a256d8be4a575bd443a7074524a6a0541
-
expat-static-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:f38a43c44c0b3b4005c8b77da547fbfe90077c5f87e650e39a81b022042a33dc
-
expat-static-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:db15d73d95d7de2ed862c3f9eb335c8a54d099e1d15e428dd568ce987eb2ee25
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
