Release date:
2026-09-14 14:36:21 UTC
Description:
- CVE-2026-76957: fix use-after-free from calling XML_ParserFree() inside a
custom unknown-encoding convert or release callback, by routing both through
callUnknownEncodingConvert()/callUnknownEncodingRelease() so they are covered
by the handler call depth tracking
Updated packages:
-
expat-2.0.1-13.el6_8.tuxcare.els13.i686.rpm
sha:1d19695b71d9b9aa33d294d4bef0ade805f512da278115ad674a2412dddd9e96
-
expat-2.0.1-13.el6_8.tuxcare.els13.x86_64.rpm
sha:0a0c45c77548b84aa8ad0640b540c21dff747f3d172753846f3d8557b3235f86
-
expat-devel-2.0.1-13.el6_8.tuxcare.els13.i686.rpm
sha:b5aab9eda18c2ff1a3989281d4d06bf5eef16a32d7939fae386c44f073f0c5ed
-
expat-devel-2.0.1-13.el6_8.tuxcare.els13.x86_64.rpm
sha:8a2c94b5498abadeea6272f52a2a4dbc13ce9590f7e0b4975a6ab1d3629b9c42
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
