CLSA-2026-1786112354

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786112354.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1786112354
Upstream
Published
2026-08-13T12:54:28Z
Modified
2026-10-26T09:31:40Z
Summary
expat: Fix of CVE-2026-56131
Details
  • CVE-2026-56131: fix use-after-free caused by XML_ResumeParser() being callable from inside a handler, which re-enters the parser while the outer frame still owns bufferPtr/eventPtr
References

Affected packages

TuxCare:CentOS:6 / expat

Package

Name
expat
Purl
pkg:rpm/tuxcare/expat?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.0.1-13.el6_8.tuxcare.els12

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786112354.json"

TuxCare:CentOS:6 / expat-devel

Package

Name
expat-devel
Purl
pkg:rpm/tuxcare/expat-devel?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.0.1-13.el6_8.tuxcare.els12

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1786112354.json"