Release date:
2026-11-09 14:06:24 UTC
Description:
- CVE-2026-117610: NULL pointer dereference in externalEntityInitProcessor2 on initial empty non-final subparser input
- CVE-2026-118370: signed integer overflow of attIndex/nPrefixes in storeAtts
Updated packages:
-
expat-2.0.1-13.el6_8.tuxcare.els16.i686.rpm
sha:83e890f9372e58ac977f039329f890fced065f5394d951614af02c7ea68a61e1
-
expat-2.0.1-13.el6_8.tuxcare.els16.x86_64.rpm
sha:f9b9dc9c99362db7a25e400f8d84d6716c559e0ba0b314141f05ddf4e5ea8076
-
expat-devel-2.0.1-13.el6_8.tuxcare.els16.i686.rpm
sha:ce9087b70e3b54e5b1371356cc4995d98127d9f2746a4a6716e9712165c40b80
-
expat-devel-2.0.1-13.el6_8.tuxcare.els16.x86_64.rpm
sha:4b8ca0c8906a33cb70e1ab36221811f165f153bd86058876b22e3e98037a0b60
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
