Release date:
2026-10-04 19:45:30 UTC
Description:
- CVE-2026-93990: reject a UTF-16 high surrogate that is not followed by a low
surrogate, so a lone high surrogate can no longer consume the next code unit
as a fake low and hide markup such as '<' from the tokenizer
Updated packages:
-
expat-2.5.0-5.el9_6.tuxcare.els14.aarch64.rpm
sha:4ab89d7be9aaffbea65bf12bd30a208de91938eae85cd614d831575d01554df2
-
expat-2.5.0-5.el9_6.tuxcare.els14.i686.rpm
sha:4d5b924cba9b9e403b2031b5fb4a72371174f4030f4f9ab35a5d58c3f367eb1d
-
expat-2.5.0-5.el9_6.tuxcare.els14.x86_64.rpm
sha:9df8ab1c0ad891a5bd427a363e2d0839f81458acf168270841810f6f4e8b9245
-
expat-devel-2.5.0-5.el9_6.tuxcare.els14.aarch64.rpm
sha:70ecba0cf46dadbcb145c74fa2b79cf08d14efc1eee115e56aa6698872e9a2b9
-
expat-devel-2.5.0-5.el9_6.tuxcare.els14.i686.rpm
sha:209a5949f044a00e5ebe4ce77ce283e2794eaa942e3d0f66414531a19c2b0dc8
-
expat-devel-2.5.0-5.el9_6.tuxcare.els14.x86_64.rpm
sha:736a4e49d359d073854bad4ec5c44ea12f0aef8f2418e6ed2bbe336c9c1d6bad
-
expat-static-2.5.0-5.el9_6.tuxcare.els14.aarch64.rpm
sha:a5fbf5762609fc3c01abcea3de579310cd3d3e61f6f3489c0cd8e3d134597cd2
-
expat-static-2.5.0-5.el9_6.tuxcare.els14.i686.rpm
sha:cf17ba61f40934ef8b7c14823f57d6d124b5aee22748935e858eced0e956416a
-
expat-static-2.5.0-5.el9_6.tuxcare.els14.x86_64.rpm
sha:2f9ec54cb7c2453ecfc2c15b5e44463a0556dd8072a1be89fdf611f04d2b1a5e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
