[CLSA-2026:1794315775] expat: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-12 14:39:58 UTC
Description:
- CVE-2026-117610: NULL pointer dereference in externalEntityInitProcessor2 on initial empty non-final subparser input - CVE-2026-118370: signed integer overflow of attIndex/nPrefixes in storeAtts
CVEs fixed:
Updated packages:
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els12.aarch64.rpm
    sha:9d228aad092fb2dc3c858c2260f07b335543e71f070c413d8ab1356bb6160578
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:d59788089f9601c1d51ea52b2b5a5dc30b3acaa915d67d4f7ffc878e051690b3
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:f3e1d68d5b202dc48af4afa5e911fcce58989dd2ab0cf362381804d5461d2a3b
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els12.aarch64.rpm
    sha:1cde10d4cc3eabc1bb08f543b581c3779a7b7ce9fcee5eb7f2fe5915e8a908c7
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:e17a8679b6dda09979cde462cc03099d382382d61007b10d80a02251c156536c
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:194b037f6c6ba1a69d42036f284449ef2efa52fed723663942564ee49fbc61bd
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els12.aarch64.rpm
    sha:81232f4a5a6783fed1c7f043504b73849029db4fe3b3b93ebfb8188115e55824
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els12.i686.rpm
    sha:1bf9fa64fd229e13541d8703c83ee4bc4bf54be9985958445e0a05939254ea78
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els12.x86_64.rpm
    sha:08d8b2689d8d8c5e12d60d9c73c105541a1a3268fd4f8197dbfb88d97ceeb9ac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.