[CLSA-2026:1794315334] expat: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-10 12:55:45 UTC
Description:
- CVE-2026-117610: NULL pointer dereference in externalEntityInitProcessor2 on initial empty non-final subparser input - CVE-2026-118370: signed integer overflow of attIndex/nPrefixes in storeAtts
CVEs fixed:
Updated packages:
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:3d38d9734843e1e6d0e2d049f27f0ff29d72559d848d328627fcee33841a63d3
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:35516774260a8984258e32e3188dd7b4f427f40bd3acf625347cd46c7586b849
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:4d547a3050154d2e0936f6035fcfda8574fa1ab46a029335309d96cb17441d0c
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:c73258fce94cd3be47a44e2a1c5a0444479881b3df719dcca4248fc19259ea77
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:41f845b08af26f315e84a0556da79bd2cbc5a9560306950e79770158a8d080f3
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:eccf3cda327133e7b925a9bbd70fbd8540cf63198b30ba18c66200472c165e86
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.