[slackware-security] expat

🗓️ 18 Mar 2026 23:33:02Reported by Slackware Linux ProjectType

Expat 2.7.5 security update fixes NULL dereference and infinite loop in external entities and OOM retry.

Reporter	Title	Published	Views	Family All 170
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Python affect AIX	15 Apr 202622:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2026-32776, CVE-2026-32777, CVE-2026-32778]	15 Apr 202605:32	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server	10 Apr 202614:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server affect IBM Business Automation Workflow (CVE-2026-32776, CVE-2026-32777, CVE-2026-32778)	8 Apr 202620:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to libexpat (CVE-2026-32776, CVE-2026-32777, CVE-2026-32778)	1 Apr 202618:08	–	ibm
ATTACKERKB	CVE-2026-32776	16 Mar 202606:54	–	attackerkb
ATTACKERKB	CVE-2026-32778	16 Mar 202607:02	–	attackerkb
ATTACKERKB	CVE-2026-32777	16 Mar 202606:58	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : firefox (ALAS2023-2026-1518)	1 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3219 (ALAS-2026-3219)	1 Apr 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Slackware	15.0	i586	expat	2.7.5	expat-2.7.5-i586-1_slack15.0.txz
Slackware	15.0	x86_64	expat	2.7.5	expat-2.7.5-x86_64-1_slack15.0.txz
Slackware	current	i686	expat	2.7.5	expat-2.7.5-i686-1.txz
Slackware	current	x86_64	expat	2.7.5	expat-2.7.5-x86_64-1.txz

18 Mar 2026 23:33Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.14 - 5.5

EPSS0.00006

SSVC