[CLSA-2026:1789203877] expat: Fix of CVE-2026-76957
Type:
security
Severity:
Critical
Release date:
2026-09-12 09:04:48 UTC
Description:
- CVE-2026-76957: bracket the custom encoding convert and release callbacks with the handler call depth guard to prevent parser reentry use-after-free
CVEs fixed:
Updated packages:
  • expat-2.5.0-1.el9_2.tuxcare.els16.i686.rpm
    sha:670ad3011219904d8bac8d9b182c7d0a65f14ece118c220ddae4d78641005f06
  • expat-2.5.0-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:05584305b946d2224454f5a1cf863c4aa045b9d50e5bb55fc431e65a7d587cfa
  • expat-devel-2.5.0-1.el9_2.tuxcare.els16.i686.rpm
    sha:1216e0628982825ecc91cb5930aaaf0d2b680fd6f7a9d24ccce8a957d1ab88b0
  • expat-devel-2.5.0-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:7aacbd35fb8fc4b9865e3d350163329cd028e0f053df8e3b7d4bcdf9465d6cc7
  • expat-static-2.5.0-1.el9_2.tuxcare.els16.x86_64.rpm
    sha:a6db6fe1d44838390907e9c17a219f9eb3f7603c6a2b76bec7eb2d85ecf43f1b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.