Summary
[2.7.3-57]
- expat: backport CVE-2026-45186 fix (attribute collision check DoS)
[2.7.3-56]
- Rebase to 2.7.3 and add VCS tag
* Thu Jun 05 2025 psklenar@redhat.com <psklenar@redhat.com>
- https://issues.redhat.com/browse/RHELMISC-13073
* Fri Mar 28 2025 Tomas Korbar <tkorbar@redhat.com>
- Fix behavior change caused by fix for CVE-2024-8176
* Fri Mar 14 2025 Tomas Korbar <tkorbar@redhat.com>
- Fix CVE-2024-8176
* Thu Nov 07 2024 Tomas Korbar <tkorbar@redhat.com>
- Rebase to 2.6.4
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com>
- Bump release for October 2024 mass rebuild:
* Wed Jul 03 2024 Tomas Korbar <tkorbar@redhat.com>
- Rebase to 2.6.2
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com>
- Bump release for June 2024 mass rebuild
* Fri Jun 21 2024 Frantisek Hrdina <fhrdina@redhat.com>
- Update of fmf plans and gating for c10s
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | expat | 0:2.7.3-1.el10_2.1 |
| Oracle Linux · 10 | expat-devel | 0:2.7.3-1.el10_2.1 |
Vulnerabilities 1
-
Low 2.9
In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service vi…