Release date:
2026-11-09 10:17:21 UTC
Description:
- CVE-2026-72522: fix an out-of-bounds read and infinite loop in the
*_toUtf16 converters by treating only genuine high surrogates as the
first half of a split surrogate pair
- CVE-2026-77214: fix a heap buffer over-read by validating the len passed
to XML_ParseBuffer against the unoccupied capacity of the parse buffer
Updated packages:
-
expat-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:fbacc9192b64c400178f40f1fa53e7e757fc0977823b7019e8487dbe7b7c6da0
-
expat-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:2d3aea7f82e67968f9f843cf9fe344ed0a4e8d355bfb04a2074c5e1f3de4f4c6
-
expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:3302f5e6961cd93053fac117cd3ea6df751f50f6b2251a1a4124ffd4d255840f
-
expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:171920b86a9c31176070f3ce523188d0c8c6c3e450aa3ec2fb0ac0dae59b167c
-
expat-static-2.1.0-15.0.7.el7_9.tuxcare.els11.i686.rpm
sha:2e265a0d1b7ea1f71e97307ea64f6f1c0ea9b97770ec822a8eb577715222972a
-
expat-static-2.1.0-15.0.7.el7_9.tuxcare.els11.x86_64.rpm
sha:93e5b561621e52df4495351e674bf067378b3edf9ea477bc609ef4db22f26174
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
