CentOS Linux 6 [TuxCare] Security Update: expat / expat-devel (CENTOS6:CLSA-2026:1786112354)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1786112354 advisory. - libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus,...

Rocky Linux 8 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel (crlsa-2024_9502)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249502 advisory. libexpat: expat: DoS via XMLResumeParser CVE-2024-50602 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

AlmaLinux 9.2 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.2:CLSA-2024:1732553483)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1732553483 advisory. - An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspe...

CentOS Linux 7 [TuxCare] Security Update: expat / expat-devel / expat-static (CENTOS7:CLSA-2026:1788950538)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1788950538 advisory. - libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus,...

EulerOS Virtualization 2.12.1 : expat (EulerOS-SA-2026-3583)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy...

CLSA-2026-1788950538 expat: Fix of CVE-2026-56131

CVE-2026-56131: fix a use-after-free by refusing re-entrant XMLResumeParser calls issued from inside handler callbacks; carries the prerequisite handler call-depth tracking, which also covers CVE-2026-50219 and CVE-2026-56412...

CLSA-2026-1788951028 expat: Fix of CVE-2026-56131

CVE-2026-56131: fix a use-after-free by refusing re-entrant XMLResumeParser calls issued from inside handler callbacks; carries the prerequisite handler call-depth tracking, which also covers CVE-2026-50219 and CVE-2026-56412...

CLSA-2026-1788950367 expat: Fix of CVE-2026-56131

CVE-2026-56131: fix a use-after-free by refusing re-entrant XMLResumeParser calls issued from inside handler callbacks; carries the prerequisite handler call-depth tracking, which also covers CVE-2026-50219 and CVE-2026-56412...

EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-3333)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a...

CLSA-2026-1786112354 expat: Fix of CVE-2026-56131

CVE-2026-56131: fix use-after-free caused by XMLResumeParser being callable from inside a handler, which re-enters the parser while the outer frame still owns bufferPtr/eventPtr...

expat: Fix of CVE-2026-56131

CVE-2026-56131: fix use-after-free caused by XMLResumeParser being callable from inside a handler, which re-enters the parser while the outer frame still owns bufferPtr/eventPtr...

CLSA-2026-1786112657 expat: Fix of CVE-2026-56131

CVE-2026-56131: fix use-after-free caused by XMLResumeParser being callable from inside a handler, which re-enters the parser while the outer frame still owns bufferPtr/eventPtr...

CLSA-2026-1786009839 expat: Fix of 3 CVEs

CVE-2026-56131: fix use-after-free from calling XMLResumeParser inside a handler by adding handler call depth tracking and rejecting re-entrant calls - CVE-2026-56407: fix signed integer overflow of entity textLen in doProlog for entity values larger than INTMAX - CVE-2026-56408: fix integer...

CLSA-2026-1786009697 expat: Fix of 3 CVEs

CVE-2026-56131: fix use-after-free from calling XMLResumeParser inside a handler by adding handler call depth tracking and rejecting re-entrant calls - CVE-2026-56407: fix signed integer overflow of entity textLen in doProlog for entity values larger than INTMAX - CVE-2026-56408: fix integer...

CLSA-2026-1786009371 expat: Fix of 3 CVEs

CVE-2026-56131: fix use-after-free from calling XMLResumeParser inside a handler by adding handler call depth tracking and rejecting re-entrant calls - CVE-2026-56407: fix signed integer overflow of entity textLen in doProlog for entity values larger than INTMAX - CVE-2026-56408: fix integer...

CLSA-2026-1784291449 expat: Fix of 2 CVEs

CVE-2026-50219: reject libexpat API re-entry from inside handler callbacks to prevent use-after-free - CVE-2026-56131: extend the handler re-entrancy guard to XMLResumeParser - CVE-2026-56412: guard XMLTOKDATACHARS handler calls in doCdataSection...

AZL-90258 CVE-2026-56131 affecting package expat for versions less than 2.8.2-1

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...

CVE-2026-56131

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...

CVE-2026-56131: Use After Free

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...

SUSE-SU-2026:0044-1 Security update for mozjs60

This update for mozjs60 fixes the following issues: - CVE-2024-45492: embedded expat: detect integer overflow in function nextScaffoldPart bsc1230038 - CVE-2024-45491: embedded expat: detect integer overflow in dtdCopy bsc1230037 - CVE-2024-45490: embedded expat: reject negative len for...