Release date:
2026-11-09 10:21:43 UTC
Description:
- CVE-2026-72522: fix an out-of-bounds read and infinite loop in the
*_toUtf16 converters by treating only genuine high surrogates as the
first half of a split surrogate pair
- CVE-2026-77214: fix a heap buffer over-read by validating the len passed
to XML_ParseBuffer against the unoccupied capacity of the parse buffer
Updated packages:
-
expat-2.1.0-15.0.7.amzn2.tuxcare.els11.i686.rpm
sha:081f2923dcd27f01b91ae2b4370e2ade76b1023adff1b4d5c338756b2cbb62b5
-
expat-2.1.0-15.0.7.amzn2.tuxcare.els11.x86_64.rpm
sha:b805365afd3f305e6d8b3f027a08250d2dad735bed41fe4adf4756cee1732604
-
expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els11.i686.rpm
sha:46fcbebd5fbc8dfd017bdafe5354dff87cb46b7de6f9142aa5759d36616f25b4
-
expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els11.x86_64.rpm
sha:807f0b1410827674f7f0defb01e55afbc55d5b11446af2781a8f4033f2248b5f
-
expat-static-2.1.0-15.0.7.amzn2.tuxcare.els11.i686.rpm
sha:9c55664ccd95ff1c5aaaeaa001f56f40db5ac30425319ae6c0d41c200eaa3799
-
expat-static-2.1.0-15.0.7.amzn2.tuxcare.els11.x86_64.rpm
sha:3d4cbeea85dd691c2eb8d9b530be58463aa04274c720bd838753c8d78985d34c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
