[CLSA-2026:1794315556] expat: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-12 03:08:24 UTC
Description:
- CVE-2026-117610: NULL pointer dereference in externalEntityInitProcessor2 on initial empty non-final subparser input - CVE-2026-118370: signed integer overflow of attIndex/nPrefixes in storeAtts
CVEs fixed:
Updated packages:
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:faf01e85518d01fab32c2fb1c8bd92175ed7864eb460f1e06bde2ed87cb1a03c
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:0002dfd8f99e06136548b85fda2a8d73cdb3e6b4a5ea0f8b3739d3607543e729
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:003bb9a08c387fe7124713c57a89761c34209dd97d3763996b9a01aaba578428
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:df01c784c7efec6e4bf153c084ebef16097331d6af6e2d5cc76160bbe0f1b364
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:c5102505cf4e6a5f9bca970eea76dc64359f149056130737801b4806b2eca883
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:8c4da39cf4521688988e6b65a118dd332b6a320e6aa79b2dcd60c291dad6a7c6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.