4021 matches found
SUSE-SU-2026:3635-1 Security update for python
This update for python fixes the following issues: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-1703: files may be extracted outside the installation directory when installing and...
PT-2026-77055
Name of the Vulnerable Software and Affected Versions Expat versions prior to 2.8.4 Description A denial of service issue exists due to quadratic algorithmic complexity within the storeAtts function in xmlparse.c. When processing N specified attributes with non-normalized values, the system...
Unity Linux 20.1070e Security Update: expat (UTSA-2026-099475)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099475 advisory. libexpat before 2.8.2 has an integer overflow in copyString. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.3-0.1.hum1 aarch64, x8664 expat-devel-2.8.3-0.1.hum1 aarch64, x8664 expat-static-2.8.3-0.1.hum1 aarch64, x8664 expat-2.8.3-0.1.hum1.src src Security Fixes: expat: CVE-2026-72522...
Slackware Linux 15.0 / current expat Vulnerability (SSA:2026-223-01)
The version of expat installed on the remote host is prior to 2.7.5 / 2.8.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-223-01 advisory. New expat packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...
[slackware-security] expat
New expat packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/expat-2.7.5-i586-3slack15.0.txz: Rebuilt. This update fixes a security issue: Fix an out-of-bounds read and the resulting infinite loo...
Security update for python311
This update for python311 fixes the following issues: Security issues fixed: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-3276: quadratic complexity in unicodedata.normalize can lead t...
Security update for python311
This update for python311 fixes the following issues: Security issues fixed: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-3276: quadratic complexity in unicodedata.normalize can lead t...
SUSE-SU-2026:3548-1 Security update for python311
This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-3276: quadratic complexity in unicodedata.normalize can le...
Astra Linux – Vulnerability in Python 3.11
When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model, a C stack overflow occurs...
Astra Linux – Vulnerability in expat
In libexpat before version 2.7.4, the doContent function does not properly determine the buffer size bufSize, as there is no check for integer overflow during the reallocation of the tag buffer...
CVE-2026-72522
libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the toUtf16 functions...
Photon OS 5.0: Expat PHSA-2024-5.0-91-0216
An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0216. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
expat: Fix of CVE-2026-56407
CVE-2026-56407: signed integer overflow in doProlog when an internal entity value longer than INTMAX XMLChars truncates ENTITY.textLen to a negative length...
Security update for python310
This update for python310 fixes the following issues: Security issues fixed: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-3276: quadratic complexity in unicodedata.normalize can lead t...
SUSE-SU-2026:3530-1 Security update for python310
This update for python310 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-3276: quadratic complexity in unicodedata.normalize can le...
OESA-2026-3254 python3 security update
Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...
[SECURITY] [DSA 6404-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6404-1 [email protected] https://www.debian.org/security/ Aron Xu July 30, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------...