[CLSA-2026:1770707507] Fix CVE(s): CVE-2026-24515

Type:

security

Severity:

Low

Release date:

2026-02-10 07:11:52 UTC

Description:

   * SECURITY UPDATE: Make XML_ExternalEntityParserCreate copy unknown encoding  handler user data
     - debian/patches/CVE-2026-24515.patch: copy unknown encoding
       handler user data and add tests to cover effect
     - CVE-2026-24515

Updated packages:

expat_2.2.6-2+deb10u7+tuxcare.els2_amd64.deb
sha:fe01a9b5a94d6ae9349e3604e7ac6f9e3e3bfa66
libexpat1_2.2.6-2+deb10u7+tuxcare.els2_amd64.deb
sha:02b1da5b11ab82da85f026a267445ec3fb6f3fea
libexpat1-dev_2.2.6-2+deb10u7+tuxcare.els2_amd64.deb
sha:978ca1d77c8b328af12ca9c642ccb4a6a4c96f03

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.