Release date:
2026-09-22 08:01:44 UTC
Description:
- CVE-2026-66046: resolve quadratic runtime in storeAtts() by migrating the
per-attribute isCdata lookup from a linear scan of elementType->defaultAtts
to a hash table lookup in elementType->defaultAttsNames, and carry the index
of an attribute's first declaration through dtdCopy() so that parsers created
by XML_ExternalEntityParserCreate resolve attributes the same way
Updated packages:
-
expat-2.5.0-1.el8.tuxcare.els8.i686.rpm
sha:bf2a9075850a0f8fcf5ab54c09f4b6a392db33347074c13afed59438dd6824a6
-
expat-2.5.0-1.el8.tuxcare.els8.x86_64.rpm
sha:140c2cf03253732bc8f476e0b668d733d2ad77cbc6aed9784b3de2345041ac5d
-
expat-devel-2.5.0-1.el8.tuxcare.els8.i686.rpm
sha:267ab180bbd234fc043d13ca8dd9571f9aa3c1d16b8a9b03df19156813c84d50
-
expat-devel-2.5.0-1.el8.tuxcare.els8.x86_64.rpm
sha:f257f5fd2dddd29dcde554e30188a221f7617f680087960342a7285b8cda8402
-
expat-static-2.5.0-1.el8.tuxcare.els8.x86_64.rpm
sha:d4b6aebabb7c7d68e244535fab7b90d24d58f319e604121b7c29b1aae878dc3f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
