CLSA-2026-1790290820
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1790290820.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1790290820
- Upstream
CVE (2)
- Published
- 2026-09-24T23:00:32Z
- Modified
- 2026-10-26T09:32:04Z
- Summary
- Fix CVE(s): CVE-2026-66046, CVE-2026-93990
- Details
-
- SECURITY UPDATE: denial of service through quadratic runtime in the
default-attribute lookup performed by storeAtts()
- debian/patches/CVE-2026-66046.patch: resolve the CDATA-ness of a specified attribute through the per-element defaultAttForName hash table instead of a linear scan of defaultAtts, and fold in the upstream follow-up that makes dtdCopy create entries of the same size so storeAtts does not read .attIndex out of bounds (libexpat PR #1321, PR #1331).
- CVE-2026-66046
- SECURITY UPDATE: malformed UTF-16 accepted because a high surrogate was
not required to be followed by a low surrogate
- debian/patches/CVE-2026-93990.patch: reject a 4-byte UTF-16 sequence whose second code unit is not a low surrogate, in both the little2_ and big2_ tokenizers (libexpat PR #1282).
- CVE-2026-93990
- SECURITY UPDATE: denial of service through quadratic runtime in the
default-attribute lookup performed by storeAtts()
- References
Affected packages
TuxCare:Ubuntu:18.04 / expat
Package
- Name
- expat
- Purl
- pkg:deb/tuxcare/expat?distro=ubuntu-18.04
TuxCare:Ubuntu:18.04 / libexpat1
Package
- Name
- libexpat1
- Purl
- pkg:deb/tuxcare/libexpat1?distro=ubuntu-18.04