CLSA-2026-1784032274
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784032274.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1784032274
- Upstream
- Published
- 2026-07-14T16:23:56Z
- Modified
- 2026-10-26T09:31:17Z
- Summary
- expat: Fix of 7 CVEs
- Details
-
- CVE-2026-56132: fix out-of-bound scaffolding index store in doProlog
- CVE-2026-56403: protect storeAtts and xmlwf xcsdup from signed integer overflow
- CVE-2026-56404: protect addBinding from signed integer overflow
- CVE-2026-56405: protect getAttributeId from signed integer overflow
- CVE-2026-56406: add missing overflow check to XML_ParseBuffer
- CVE-2026-56410: protect xmlwf resolveSystemId from integer overflow
- CVE-2026-56411: protect xmlwf notation list allocation from integer overflow
- References
-
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784032274.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-56132
- https://nvd.nist.gov/vuln/detail/CVE-2026-56403
- https://nvd.nist.gov/vuln/detail/CVE-2026-56404
- https://nvd.nist.gov/vuln/detail/CVE-2026-56405
- https://nvd.nist.gov/vuln/detail/CVE-2026-56406
- https://nvd.nist.gov/vuln/detail/CVE-2026-56410
- https://nvd.nist.gov/vuln/detail/CVE-2026-56411
Affected packages
TuxCare:AlmaLinux:9.6 / expat
Package
- Name
- expat
- Purl
- pkg:rpm/tuxcare/expat?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / expat-devel
Package
- Name
- expat-devel
- Purl
- pkg:rpm/tuxcare/expat-devel?distro=almalinux-9.6