High ELSA-2025-19403 1 CVE

Important: expat security update (Oracle Linux 10)

Published Nov 2, 2025 · Updated Nov 2, 2025

Ecosystem: Oracle Linux

Summary

[2.7.1-3]
- Backport security fixes to expat

[2.7.1-2]
- https://issues.redhat.com/browse/RHELMISC-13073

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 10	expat	0:2.7.1-1.el10_0.3
Oracle Linux · 10	expat-devel	0:2.7.1-1.el10_0.3

Vulnerabilities 1

High 7.5

CVE-2025-59375

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that i…

libexpat project libexpat thunderbird firefox-esr Debian Ubuntu Azure Linux Alpine Wolfi

Sep 15, 2025