577 matches found
[SECURITY] [DSA 6404-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6404-1 [email protected] https://www.debian.org/security/ Aron Xu July 30, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------...
CLEANSTART-2026-AV27386 Security fixes in expat 2.4.4-r0
Package expat version 2.4.4-r0 fixes 2 vulnerabilities: CVE-2022-23852, CVE-2022-23990...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2725)
According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer...
ROOT-OS-DEBIAN-12-CVE-2026-41080 CVE-2026-41080 in rootio-expat - Patched by Root
Root has patched CVE-2026-41080 in the rootio-expat package for Root:Debian:12. Multiple fixed versions available...
OESA-2026-2976 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before 2.8.2 has an integer overflow in storeAtts.CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in...
OESA-2026-2973 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before 2.8.2 has an integer overflow in storeAtts.CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in...
OESA-2026-2857 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a poli...
GHSA-XQW9-F65G-5QXW vulnerabilities
Vulnerabilities for packages: expat...
CVE-2026-56404 vulnerabilities
Vulnerabilities for packages: expat...
Astra Linux – Vulnerability in expat
In libexpat before version 2.7.4, the doContent function does not properly determine the buffer size bufSize, as there is no check for integer overflow during the reallocation of the tag buffer...
SUSE CVE-2026-56403
libexpat before 2.8.2 has an integer overflow in storeAtts...
SUSE CVE-2026-56410
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...
UBUNTU-CVE-2026-56412
libexpat before 2.8.2 does not consider XMLTOKDATACHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219...
CVE-2026-56407
libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen...
ALPINE-CVE-2026-56405
libexpat before 2.8.2 has an integer overflow in getAttributeId...
ALPINE-CVE-2026-56404
libexpat before 2.8.2 has an integer overflow in addBinding...
CVE-2026-56403
libexpat before 2.8.2 has an integer overflow in storeAtts...
UBUNTU-CVE-2026-56406
libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse...