Release date:
2026-09-11 16:05:18 UTC
Description:
- CVE-2026-76957: fix use-after-free from calling XML_ParserFree() inside a
custom unknown-encoding convert or release callback, by routing both through
callUnknownEncodingConvert()/callUnknownEncodingRelease() in
handleUnknownEncoding() so they are bracketed by the handler call depth
tracking added for CVE-2026-56131
Updated packages:
-
expat-2.5.0-1.el8.tuxcare.els7.i686.rpm
sha:0b67164dcc815d1fc7b8fac0bcf232ab3a139537f5d99cef1bcec8a6bbc12d21
-
expat-2.5.0-1.el8.tuxcare.els7.x86_64.rpm
sha:90b54188746786c5c893d29434bc20a3abd875fc0be3cb707120626ff4b36e0c
-
expat-devel-2.5.0-1.el8.tuxcare.els7.i686.rpm
sha:2b09583bd75ee09dd254194f8044347027a4924cda81f0dfbb48301670dd2d77
-
expat-devel-2.5.0-1.el8.tuxcare.els7.x86_64.rpm
sha:7a92062590e1bf45755eb808a43a73845bcc359fcc75658300f7d7435fa72462
-
expat-static-2.5.0-1.el8.tuxcare.els7.x86_64.rpm
sha:679a2d93e399bc4d7542e3c872ac32d28f58091c13f50643109400ec883bed47
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
