[CLSA-2026:1794315332] expat: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-10 12:55:44 UTC
Description:
- CVE-2026-117610: NULL pointer dereference in externalEntityInitProcessor2 on initial empty non-final subparser input - CVE-2026-118370: signed integer overflow of attIndex/nPrefixes in storeAtts
CVEs fixed:
Updated packages:
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:9ff9f73cc8caee4fe810c145bee9e4b0e45bcefab6514aad306fb7e6d2f54e62
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:3fdb1f3b2a1a03ff03c0151ee327210e9615041ebc2dd7deb210d9e5fb49af5e
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:45c58ab9e751bcd2d7ca9a9a4bcbab8ff72dcc3409761fc92cf8b1f48182c9b8
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:6f1daf15fd4754365f49e1ca84a96a080a72c1d42df75cb65bd06c51f5e8d01a
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:3e12bddc8402c9be1b20c64285f0582691196535b944475554b73333caf6b78a
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:277feafd8b642c3e0b5019af649be1efdf3bcc17037eadd1a6f3dfe2ae22cf9b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.