CLSA-2026-1790802906 expat: Fix of 3 CVEs

CVE-2026-66046: replace the linear scan of elementType-defaultAtts in storeAtts with a hash table lookup, and carry the attribute index over in dtdCopy so the lookup stays in bounds - CVE-2026-93990: reject a UTF-16 high surrogate that is not followed by a low surrogate, so a lone high surrogate...

Rocky Linux 9.6 [CIQ] Security Update: expat / expat-devel Multiple Vulnerabilities (ciqsa-2026_1548)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261548 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 9.6. It addresses 2 CVEs: CVE-2024-8176, CVE-2026-93990. Tenable has extracted the...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.4-0.2.hum1 aarch64, x8664 expat-devel-2.8.4-0.2.hum1 aarch64, x8664 expat-static-2.8.4-0.2.hum1 aarch64, x8664 expat-2.8.4-0.2.hum1.src src Security Fixes: expat: CVE-2026-93990...

CVE-2026-93990

creationtimestamp| type| source ---|---|--- 2026-09-20 00:01:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvvvfcvx4w2k 2026-09-20 00:01:58+00:00| seen| https://gist.github.com/ichintu/01ed07128f5969a05edb4956f1b946dd 2026-09-20 00:06:36+00:00| seen|...