Release date:
2026-11-11 15:54:14 UTC
Description:
- CVE-2026-72522: fix an out-of-bounds read and infinite loop in the
*_toUtf16 converters by treating only genuine high surrogates as the
first half of a split surrogate pair
- CVE-2026-77214: fix a heap buffer over-read by validating the len passed
to XML_ParseBuffer against the unoccupied capacity of the parse buffer
Updated packages:
-
expat-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:edfab26d25ac3620a3abe3a32f31fbc757bfa97676e882b2f0ec53f1e9f68001
-
expat-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:5f27f11978bfdba3db56276d41f34be5c10dbd058ca72948fd3dd215d43dd2c0
-
expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:a7df2048177eb2716d0fcd9373b19929db774c9d83dbbf47205acb18b4f93fa5
-
expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:8227fe8e33cd93bd045afca6c948225593e60d2b9d2144c4cbf55b6196dbac0c
-
expat-static-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:ad0639fbabf7f74bc878c19a9355413e389e2b5ef7d31576681d60a9d40187ec
-
expat-static-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:e6ee3d0e5f54e2580c13fc20fd623018cefbd103f5da8ad7e0cc2d2f1c8e5ba4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
