Release date:
2026-11-06 23:08:33 UTC
Description:
* SECURITY UPDATE: NULL pointer dereference in externalEntityInitProcessor2 on initial empty non-final subparser input
- debian/patches/CVE-2026-117610.patch: NULL pointer dereference in externalEntityInitProcessor2 on initial empty non-final subparser input
- CVE-2026-117610
* SECURITY UPDATE: signed integer overflow of attIndex/nPrefixes in storeAtts
- debian/patches/CVE-2026-118370.patch: signed integer overflow of attIndex/nPrefixes in storeAtts
- CVE-2026-118370
Updated packages:
-
expat_2.2.6-2+deb10u7+tuxcare.els12_amd64.deb
sha:52ad23712c794a4472a72108d5f5e0593f8b954f
-
libexpat1_2.2.6-2+deb10u7+tuxcare.els12_amd64.deb
sha:b5163e5ba29cc9cce291e95c4f2c5ce18cf04cb2
-
libexpat1-dev_2.2.6-2+deb10u7+tuxcare.els12_amd64.deb
sha:8d8fc484a957ea7c580dbca54d5db28d01325d90
-
expat_2.2.6-2+deb10u7+tuxcare.els12_arm64.deb
sha:9f69be8a360f21975a8910c2bbd3ffa5b6aa8f65
-
libexpat1_2.2.6-2+deb10u7+tuxcare.els12_arm64.deb
sha:457bd7dc0233a961c2b2fd4eff17f1684746bc85
-
libexpat1-dev_2.2.6-2+deb10u7+tuxcare.els12_arm64.deb
sha:19a188fd0ce0b5e1b156bc9a14a4e401e957639f
-
expat_2.2.6-2+deb10u7+tuxcare.els12_armel.deb
sha:043906f985b07021ef1f3222cbc3f9e73e1ea5de
-
libexpat1_2.2.6-2+deb10u7+tuxcare.els12_armel.deb
sha:99929dff9be4653c55d49b9809317825577457ad
-
libexpat1-dev_2.2.6-2+deb10u7+tuxcare.els12_armel.deb
sha:2ce42426b6d3cbe18f0eeb63ce21277e2e8bbca7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
