CLSA-2026-1791333440
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1791333440.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1791333440
- Upstream
CVE (2)
- Published
- 2026-10-07T00:37:31Z
- Modified
- 2026-10-26T09:31:55Z
- Summary
- expat: Fix of 2 CVEs
- Details
-
- CVE-2026-66046: fix quadratic runtime in storeAtts() by resolving an attribute's declared type through the default-attribute hash table instead of a linear scan of the element's default attributes
- CVE-2026-93990: reject a UTF-16 high surrogate that is not followed by a low surrogate, so malformed UTF-16 can no longer hide markup characters from the tokenizer
- References
Affected packages
TuxCare:OracleLinux:6 / expat
Package
- Name
- expat
- Purl
- pkg:rpm/tuxcare/expat?distro=oraclelinux-6