[CLSA-2026:1791196479] expat: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-23 23:49:59 UTC
Description:
- CVE-2026-102633: reject a size that would overflow the allocation in expat_realloc() instead of relying on an assert that release builds compile out
CVEs fixed:
Updated packages:
  • expat-2.5.0-1.el9_2.tuxcare.els18.aarch64.rpm
    sha:07a3a11ee21bb44bcf0b84ec1dba89897479d6ebda49e34832fe6595693a7578
  • expat-2.5.0-1.el9_2.tuxcare.els18.i686.rpm
    sha:69c8f772061e001a21d3befe340cd08ca1ef1be7a1a54647b14c1c1edd1cf74e
  • expat-2.5.0-1.el9_2.tuxcare.els18.x86_64.rpm
    sha:55934d7180a2742fc045cb85c4d6333a9e9a8cc3638ea0260ab560456fb9a7ba
  • expat-devel-2.5.0-1.el9_2.tuxcare.els18.aarch64.rpm
    sha:feed3f6330cd3192f7b2188dbdce380292fb335d1fd2655a4b421f4e8728c75a
  • expat-devel-2.5.0-1.el9_2.tuxcare.els18.i686.rpm
    sha:a60012677e46c3a99095f62cc1b1e7ec34d7f0fbf1a33a22419e5add40acb64e
  • expat-devel-2.5.0-1.el9_2.tuxcare.els18.x86_64.rpm
    sha:772cd77b969e047dd5bf7161cc500c9c8a682e46ba55fffa27286de81ee0cc33
  • expat-static-2.5.0-1.el9_2.tuxcare.els18.aarch64.rpm
    sha:31b2eec254b046b5562cc05997d6aa8921fd3e8e490d21e7878f54f4b76f64eb
  • expat-static-2.5.0-1.el9_2.tuxcare.els18.i686.rpm
    sha:dfc723723a4ac023e5801c40fdb61f4da24b07ecec31bd77ec23db9a29d4c6f6
  • expat-static-2.5.0-1.el9_2.tuxcare.els18.x86_64.rpm
    sha:83832ad003377a7ddd85d363db7bf9067b682597dd6b81651732209fe6a6fee4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.