Release date:
2026-09-11 16:12:15 UTC
Description:
- CVE-2026-76957: fix use-after-free from calling XML_ParserFree() inside a
custom unknown-encoding convert or release callback, by routing both through
callUnknownEncodingConvert()/callUnknownEncodingRelease() in
handleUnknownEncoding() so they are bracketed by the handler call depth
tracking added for CVE-2026-56131
Updated packages:
-
expat-2.5.0-1.el8.tuxcare.els7.i686.rpm
sha:492de08b5b81b0f368fff5b686c9129ef458b28608ef3c893ea29b119eb9c20b
-
expat-2.5.0-1.el8.tuxcare.els7.x86_64.rpm
sha:09cfdf89f8af8d63a7fe159a8dfd50f5b876e302b11c1aa5eb5969e95367b074
-
expat-devel-2.5.0-1.el8.tuxcare.els7.i686.rpm
sha:c7173133fab2316c155f77cffa7dd962b72889e396308cef2e8bd405d93dd9af
-
expat-devel-2.5.0-1.el8.tuxcare.els7.x86_64.rpm
sha:7d27b21e5a8fc83f61640b9455613cfbd724f5abfcb4a82223e57f0bd01effba
-
expat-static-2.5.0-1.el8.tuxcare.els7.x86_64.rpm
sha:0288d2cea1fd5ca0e736574a01f46dba472d2a9c459cc82facf11bb9b18c9999
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
