[CLSA-2026:1791791753] expat: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-23 23:44:28 UTC
Description:
- CVE-2026-102633: reject a size that would overflow the allocation in expat_realloc() instead of relying on an assert that release builds compile out
CVEs fixed:
Updated packages:
  • expat-2.5.0-5.el9_6.tuxcare.els15.aarch64.rpm
    sha:d2882864935413c2887d10fca99ed580ac85b6dae944769bf3eeb9a865e6f765
  • expat-2.5.0-5.el9_6.tuxcare.els15.i686.rpm
    sha:c54b82586abed4fcf0e2e8d53a811fabeda0d46b715b5312aaf2834803cfdc7b
  • expat-2.5.0-5.el9_6.tuxcare.els15.x86_64.rpm
    sha:73ca73a5f78c5e51ea376b012998031c24de01a12d60cdbeaad2ea73f8d89062
  • expat-devel-2.5.0-5.el9_6.tuxcare.els15.aarch64.rpm
    sha:032a569473799fa64b8299eb8d8766ddb0d2c406de8f10be39e09c6b38f59323
  • expat-devel-2.5.0-5.el9_6.tuxcare.els15.i686.rpm
    sha:f586e33ca3fb11b55209e3e54afcfcaebd3bd30139e7948525b1052fdab24631
  • expat-devel-2.5.0-5.el9_6.tuxcare.els15.x86_64.rpm
    sha:087401b5cbdb76bfdd0d7c42fdfd9d95835b584e8706b36b595f7d165805fcb0
  • expat-static-2.5.0-5.el9_6.tuxcare.els15.aarch64.rpm
    sha:b24282d94d518e0bda61e5eae466909ea263440b003780a89fce12d814b9589f
  • expat-static-2.5.0-5.el9_6.tuxcare.els15.i686.rpm
    sha:38fc39e2651e77055078408ac64d0a8cf4bd7c5de4d72c85ef4e47e5d972a0a0
  • expat-static-2.5.0-5.el9_6.tuxcare.els15.x86_64.rpm
    sha:cadc020289effe9d8a9fed81afa8ace56b51c19cb82dce2ef407fd73c324ae84
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.