[CLSA-2026:1786018364] expat: Fix of CVE-2026-56407
Type:
security
Severity:
Important
Release date:
2026-08-06 12:13:11 UTC
Description:
- CVE-2026-56407: prevent signed integer overflow of the entity textLen field by capping the entityValuePool length at INT_MAX in doProlog
CVEs fixed:
Updated packages:
  • expat-2.1.0-15.0.7.amzn2.tuxcare.els4.i686.rpm
    sha:4cb5d370236d4ef1a772dc127126094f73998f86f5158533c8e5a207e69cdfc6
  • expat-2.1.0-15.0.7.amzn2.tuxcare.els4.x86_64.rpm
    sha:219a88394a62f45b0bb7a281ad14823238bb5165abbf4fa2d8274d129dac22f2
  • expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els4.x86_64.rpm
    sha:dc4c36dcbdef5606c01e57b7c55cce2a55b3fa4f5b02d0fea10cffe308862e49
  • expat-static-2.1.0-15.0.7.amzn2.tuxcare.els4.x86_64.rpm
    sha:3466409b7a2eb3b92893b6a9c55acf6c1e179f124b6afaee9cb49df0e37ac694
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.