[CLSA-2026:1786034768] expat: Fix of CVE-2026-56407
Type:
security
Severity:
Important
Release date:
2026-08-08 21:24:19 UTC
Description:
- CVE-2026-56407: signed integer overflow in doProlog() when an internal entity value longer than INT_MAX XML_Chars truncates ENTITY.textLen to a negative length
CVEs fixed:
Updated packages:
  • expat-2.0.1-13.el6_8.tuxcare.els11.i686.rpm
    sha:2f56cb2791da5db314ced5600c2fc35924710c8a62b82cfd5dc7bda1466463fa
  • expat-2.0.1-13.el6_8.tuxcare.els11.x86_64.rpm
    sha:b671522fb26d6cc2872c37a00d9bdd12e0e3764e28c294cf133304958faea65b
  • expat-devel-2.0.1-13.el6_8.tuxcare.els11.i686.rpm
    sha:e6237dd34e1946b90652a154a0678dae334644a6d6cf8a82f45e39cc2c5e41e3
  • expat-devel-2.0.1-13.el6_8.tuxcare.els11.x86_64.rpm
    sha:f27cf9ae31fb3e06ec7dff52101a8827a27a62d80dd9bd93c22882c509ff6b9e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.