ROOT-OS-DEBIAN-12-CVE-2026-56408 CVE-2026-56408 in expat - Patched by Root

Root has patched CVE-2026-56408 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-50219 CVE-2026-50219 in expat - Patched by Root

Root has patched CVE-2026-50219 in the expat package for Root:Debian:12. Multiple fixed versions available...

Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-064 (ALASFIREFOX-2026-064)

The version of firefox installed on the remote host is prior to 140.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-064 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the...

Debian dla-4765 : expat - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4765 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4765-1 [email protected]...

Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3880 (ALAS-2026-3880)

The version of thunderbird installed on the remote host is prior to 140.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3880 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.3-0.1.1.hum1 aarch64, x8664 expat-devel-2.8.3-0.1.1.hum1 aarch64, x8664 expat-static-2.8.3-0.1.1.hum1 aarch64, x8664 expat-2.8.3-0.1.1.hum1.src src Security Fixes: expat:...

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2

CVE-2026-76957 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2

CVE-2026-76956 affecting package expat for versions less than 2.8.3-2. A patched version of the package is available...

Astra Linux – Vulnerability in expat

In Expat also known as libexpat, before version 2.4.5, there is an integer overflow in the copyString function...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

LibExpat through version 2.5.0 causes a denial of service resource consumption because multiple reparings are required when dealing with large tokens, resulting in multiple buffer fills...

Astra Linux – Vulnerabilities in expat, Firefox, Thunderbird

In libexpat before version 2.7.4, the doContent function does not properly determine the buffer size bufSize, as there is no check for integer overflow during the reallocation of the tag buffer...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

In xmltokimpl.c within Expat also known as libexpat, before version 2.4.5, there was no proper validation of encoding. This meant that there were no checks to determine whether a UTF-8 character was valid in a particular context...

Astra Linux – Vulnerability in Firefox and Thunderbird

A read operation outside of its bound range could have caused a crash in the RLBox Expat driver. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

In libexpat through version 2.4.9, there was a use-after-free issue caused by excessive destruction of a shared DTD in the XMLExternalEntityParserCreate function, especially in out-of-memory situations...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7

When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model, a C stack overflow occurs...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

The lookup function in xmlparse.c within Expat also known as libexpat has an integer overflow before version 2.4.3...

Astra Linux – Vulnerability in libxmltok

In the libexpat library in ExPat before version 2.2.7, XML input containing XML elements with a large number of colons could cause the XML parser to consume a high amount of RAM and CPU resources during processing. This behavior could potentially be exploited in denial-of-service attacks...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok

The issue with integer overflow occurs in storeAtts in the xmlparse.c file, within the Expat library also known as libexpat, before version 2.4.3...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

Expat also known as libexpat before version 2.4.4 has an integer overflow in the doProlog function...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, and Expat

In Expat also known as libexpat, before version 2.4.3, a left shift of 29 or more in the storeAtts function in xmlparse.c could lead to improper realloc behavior. This could result in allocating too few bytes, or only freeing memory after it was no longer needed...