High ELSA-2025-21030 1 CVE

Important: expat security update (Oracle Linux 10)

Published Dec 2, 2025 · Updated Dec 2, 2025

Ecosystem: Oracle Linux

Summary

[2.7.1-3]
- Fix CVE-2025-59375 - backport allocation tracking improvements

[2.7.1-2]
- https://issues.redhat.com/browse/RHELMISC-13073

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 10	expat	0:2.7.1-1.el10_1.3
Oracle Linux · 10	expat-devel	0:2.7.1-1.el10_1.3

Vulnerabilities 1

High 7.5

CVE-2025-59375

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that i…

libexpat project libexpat thunderbird firefox-esr Debian Ubuntu Azure Linux Alpine Wolfi

Sep 15, 2025