Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.2-1.1.hum1 aarch64, x8664 expat-devel-2.8.2-1.1.hum1 aarch64, x8664 expat-static-2.8.2-1.1.hum1 aarch64, x8664 expat-2.8.2-1.1.hum1.src src...

CVE-2026-56407 vulnerabilities

Vulnerabilities for packages: expat...

MGASA-2026-0204 Updated expat packages fix security vulnerabilities

CVE-2026-45186 the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input...

Updated expat packages fix security vulnerabilities

CVE-2026-45186 the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input...

MiracleLinux 8 : expat-2.5.0-2.el8_10 (AXSA:2026-758:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-758:06 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 Tenable has extracted the preceding description block directly from the MiracleLinux security...

Important Photon OS Security Update - PHSA-2026-5.0-91-0843

Updates of 'expat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-4.0-1013

Updates of 'expat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-0843

Updates of 'expat' packages of Photon OS have been released...

NewStart CGSL MAIN 7.02 : expat Vulnerability (NS-SA-2026-0035)

The remote NewStart CGSL host, running version MAIN 7.02, has expat packages installed that are affected by a vulnerability: - An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINTMAX equals SIZEMAX...

Important Photon OS Security Update - PHSA-2026-5.0-0756

Updates of 'expat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-90-0756

Updates of 'expat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0756

Updates of 'expat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0756

Updates of 'expat' packages of Photon OS have been released...

MiracleLinux 8 : expat-2.2.5-16.el8_10 (AXSA:2024-9009:08)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9009:08 advisory. libexpat: expat: DoS via XMLResumeParser CVE-2024-50602 Tenable has extracted the preceding description block directly from the MiracleLinux security advisor...

MiracleLinux 8 : expat-2.2.5-17.el8_10 (AXSA:2025-9859:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9859:02 advisory. libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat CVE-2024-8176 Tenable has extracted the preceding description block directly...

MGASA-2025-0240 Updated expat packages fix security vulnerabilities

Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 This is an extension of the fix published in MGASA-2025-0109 that was determined by upstream to be incomplete. Libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small...

Important Photon OS Security Update - PHSA-2025-5.0-0642

Updates of 'expat', 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-4.0-0793

Updates of 'expat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-91-0502

Updates of 'expat' packages of Photon OS have been released...

MGASA-2025-0109 Updated expat packages fix security vulnerability

Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 NOTE: upstream deemed this fix incomplete after it was initially pushed. The complete fix was submitted along with the fix for CVE-2025-59375...