[CLSA-2026:1790153508] expat: Fix of CVE-2026-66046
Type:
security
Severity:
Important
Release date:
2026-09-23 08:51:57 UTC
Description:
- CVE-2026-66046: replace the linear scan of elementType->defaultAtts in storeAtts() with a hash table lookup, and carry the attribute index over in dtdCopy() so the lookup stays in bounds
CVEs fixed:
Updated packages:
  • expat-2.5.0-5.el9_6.tuxcare.els13.i686.rpm
    sha:fc0307198ef05f3925b01302817eba1c6a02c5a25b85f367b61fb0c0758712fd
  • expat-2.5.0-5.el9_6.tuxcare.els13.x86_64.rpm
    sha:adc4a4d8ee792c2b23a3960a35d59d20ed89dbf0a6f21aadef4acce8aa0e581c
  • expat-devel-2.5.0-5.el9_6.tuxcare.els13.i686.rpm
    sha:85b861f1bb67fe0679c9fb5047c004cd63b4a33c08afdd706dd41ad1cba708a8
  • expat-devel-2.5.0-5.el9_6.tuxcare.els13.x86_64.rpm
    sha:4966929a53a920c2bbdbc3795825368d31602246208f98e0cd85b074431241b5
  • expat-static-2.5.0-5.el9_6.tuxcare.els13.x86_64.rpm
    sha:976a6b79dab58541422a16c99dffbd7d4c889e481e8197ce65be871de344a8db
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.