Release date:
2026-07-17 12:17:30 UTC
Description:
- CVE-2026-50219: reject libexpat API re-entry from inside handler callbacks
to prevent use-after-free
- CVE-2026-56131: extend the handler re-entrancy guard to XML_ResumeParser
- CVE-2026-56412: guard XML_TOK_DATA_CHARS handler calls in doCdataSection
Updated packages:
-
expat-2.5.0-5.el9_6.tuxcare.els10.i686.rpm
sha:7d7533b593f7083ba86cf5490b12a749e590447896ec4b8d2506e15005644dd3
-
expat-2.5.0-5.el9_6.tuxcare.els10.x86_64.rpm
sha:2566a9695002d48cb01313dcdf4913deddfdb0fbceea4a0b42d89e96975f147d
-
expat-devel-2.5.0-5.el9_6.tuxcare.els10.i686.rpm
sha:880468188b3971fe3043b2af05c4a5e9a3ec4ce3735d7fa268ea489445c215ff
-
expat-devel-2.5.0-5.el9_6.tuxcare.els10.x86_64.rpm
sha:b49b0998ccf99e89267c161a6d3a478b06105d55ffbe33655e9837b42b4df56b
-
expat-static-2.5.0-5.el9_6.tuxcare.els10.x86_64.rpm
sha:d6c4c8a6cf6735004d9f40391784b7a38377770ec4d1048cb54d70f723dc9535
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
