Release date:
2026-10-07 00:37:31 UTC
Description:
- CVE-2026-66046: fix quadratic runtime in storeAtts() by resolving an
attribute's declared type through the default-attribute hash table instead
of a linear scan of the element's default attributes
- CVE-2026-93990: reject a UTF-16 high surrogate that is not followed by a
low surrogate, so malformed UTF-16 can no longer hide markup characters
from the tokenizer
Updated packages:
-
expat-2.0.1-13.el6_8.tuxcare.els14.i686.rpm
sha:7443bd0b2128fb1529b116fa99ef2d37f273aed234188b11fca62aee73974a60
-
expat-2.0.1-13.el6_8.tuxcare.els14.x86_64.rpm
sha:9438a790215606a1ea11314d88540ac21e7d109d516a43dea7f966eb0a98547f
-
expat-devel-2.0.1-13.el6_8.tuxcare.els14.i686.rpm
sha:f6642330db50eb5a4c895cc82072f7c9f860cd71c7f40cab1a31c52bfb8e532b
-
expat-devel-2.0.1-13.el6_8.tuxcare.els14.x86_64.rpm
sha:ad47043ecfe2778a50df01e6d01ef8a4302117eb1d5642fb79933fbb564d7fcf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
