Description
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| libexpat project | libexpat | < 2.7.2 | 2.7.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | expat | 2.7.2-1 | — |
| Debian 14 | firefox-esr | 140.9.0esr-1 | — |
| Debian 14 | thunderbird | 1:140.9.0esr-1 | — |
| Debian 13 | expat | 2.8.2-1~deb13u1 | — |
| Debian 13 | firefox-esr | 140.9.0esr-1~deb13u1 | DSA-6178-1 |
| Debian 13 | thunderbird | 1:140.9.0esr-1~deb13u1 | DSA-6179-1 |
| Debian 12 | expat | 2.5.0-1+deb12u5 | — |
| Debian 12 | firefox-esr | 140.9.0esr-1~deb12u1 | DSA-6178-1 |
| Debian 12 | thunderbird | 1:140.9.0esr-1~deb12u1 | DSA-6179-1 |
| Debian 11 | firefox-esr | 140.9.0esr-1~deb11u1 | DLA-4510-1 |
| Debian 11 | thunderbird | 1:140.9.0esr-1~deb11u1 | DLA-4511-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | tdom +5 | No fix yet | — |
| Ubuntu 26.04 LTS | expat | 2.7.4-1ubuntu0.1 | USN-8790-1 |
| Ubuntu 26.04 LTS | tdom +3 | No fix yet | — |
| Ubuntu 25.10 | expat | 2.7.1-2ubuntu0.2 | — |
| Ubuntu 25.10 | tdom +5 | No fix yet | — |
| Ubuntu 24.04 LTS | expat | 2.6.1-2ubuntu0.5 | USN-8790-1 |
| Ubuntu 24.04 LTS | tdom +1 | No fix yet | — |
| Ubuntu 22.04 LTS | expat | 2.4.7-1ubuntu0.8 | USN-8790-1 |
| Ubuntu 22.04 LTS | tdom +3 | No fix yet | — |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | tdom +4 | No fix yet | — |
| Ubuntu 18.04 LTS | gdcm +7 | No fix yet | — |
| Ubuntu 16.04 LTS | gdcm +6 | No fix yet | — |
| Ubuntu Pro 26.04 LTS | swish-e | No fix yet | — |
| Ubuntu Pro 24.04 LTS | swish-e +2 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | swish-e +2 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | expat | 2.2.9-1ubuntu0.8+esm2 | USN-8790-1 |
| Ubuntu Pro 20.04 LTS | swish-e +2 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | coin3 +3 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | expat | 2.2.5-3ubuntu0.9+esm4 | USN-8790-1 |
| Ubuntu Pro 16.04 LTS | expat | 2.1.0-7ubuntu0.16.04.5+esm13 | USN-8790-1 |
| Ubuntu Pro 16.04 LTS | vtk +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | expat | 2.1.0-4ubuntu1.4+esm12 | USN-8790-1 |
| Ubuntu Pro 14.04 LTS | vtk +3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | expat +1 | 2.7.1-1.el10_0.3 | RHSA-2025:21030, RHSA-2025:19403 |
| RHEL 10 | python3 +8 | 3.12.13-2.el10_2 | RHSA-2026:19064 |
| RHEL 9 | expat +1 | 2.5.0-5.el9_7.1 | RHSA-2025:22175 |
| RHEL 9 | python3.12 +6 | 3.12.13-2.el9_8 | RHSA-2026:19177 |
| RHEL 8 | expat +4 | 2.5.0-1.el8_10 | RHSA-2025:21974, RHSA-2025:21776 |
| RHEL 8 | mingw-fontconfig +2 | 2.12.6-4.el8_10 | RHSA-2026:3407 |
| RHEL 8 | python3.12 +7 | 3.12.13-2.el8_10 | RHSA-2026:10950 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.6 EUS | expat +1 | 2.5.0-5.el9_6.1 | RHSA-2025:21773 |
| RHEL 9.4 EUS | expat | 2.5.0-2.el9_4.3 | RHSA-2025:22033 |
| RHEL 9.2 E4S | expat | 2.5.0-1.el9_2.3 | RHSA-2025:22034 |
| RHEL 9.0 E4S | expat | 2.2.10-12.el9_0.4 | RHSA-2025:22035 |
| RHEL 8.8 TUS | expat | 2.2.10-1.el8_8 | RHSA-2025:22607 |
| RHEL 8.8 TUS | spice-client-win +2 | 8.10-3.el8_8.1 | RHSA-2026:0001 |
| RHEL 8.8 E4S | expat | 2.2.10-1.el8_8 | RHSA-2025:22607 |
| RHEL 8.8 E4S | spice-client-win +2 | 8.10-3.el8_8.1 | RHSA-2026:0001 |
| RHEL 8.6 TUS | expat | 2.2.10-1.el8_6 | RHSA-2025:22842 |
| RHEL 8.6 TUS | spice-client-win +2 | 8.10-3.el8_6.1 | RHSA-2026:0076 |
| RHEL 8.6 E4S | expat | 2.2.10-1.el8_6 | RHSA-2025:22842 |
| RHEL 8.6 E4S | spice-client-win +2 | 8.10-3.el8_6.1 | RHSA-2026:0076 |
| RHEL 8.6 AUS | expat | 2.2.10-1.el8_6 | RHSA-2025:22842 |
| RHEL 8.6 AUS | spice-client-win +2 | 8.10-3.el8_6.1 | RHSA-2026:0076 |
| RHEL 8.4 EUS Long Life | expat | 2.2.10-1.el8_4 | RHSA-2025:22785 |
| RHEL 8.4 EUS Long Life | spice-client-win +2 | 8.10-3.el8_4.1 | RHSA-2026:0077 |
| RHEL 8.4 AUS | expat | 2.2.10-1.el8_4 | RHSA-2025:22785 |
| RHEL 8.4 AUS | spice-client-win +2 | 8.10-3.el8_4.1 | RHSA-2026:0077 |
| RHEL 8.2 AUS | expat | 2.2.10-1.el8_2 | RHSA-2025:22871 |
| RHEL 8.2 AUS | spice-client-win +2 | 8.10-3.el8_2.1 | RHSA-2026:0078 |
| Red Hat Hardened Images 1 | expat +2 | 2.7.5-1.hum1 | RHSA-2026:5396 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | expat +1 | 2.7.1-1.el10_0.3 | ALSA-2025:21030, ALSA-2025:19403 |
| AlmaLinux 10 | python3 +7 | 3.12.13-2.el10_2 | ALSA-2026:19064 |
| AlmaLinux 9 | expat +1 | 2.5.0-5.el9_7.1 | ALSA-2025:22175 |
| AlmaLinux 9 | python3.12 +6 | 3.12.13-2.el9_8 | ALSA-2026:19177 |
| AlmaLinux 8 | expat +3 | 2.5.0-1.el8_10 | ALSA-2025:21974, ALSA-2025:21776 |
| AlmaLinux 8 | mingw32-fontconfig +1 | 2.12.6-4.el8_10 | ALSA-2026:3407 |
| AlmaLinux 8 | python3.12 +7 | 3.12.13-2.el8_10 | ALSA-2026:10950 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | expat | 2.7.1-1.el10_0.3 | RLSA-2025:19403 |
| Rocky Linux 10 | python3.12 | 3.12.13-2.el10_2 | RLSA-2026:19064 |
| Rocky Linux 9 | expat | 2.5.0-5.el9_7.1 | RLSA-2025:22175 |
| Rocky Linux 9 | python3.12 | 3.12.13-2.el9_8 | RLSA-2026:19177 |
| Rocky Linux 8 | expat +1 | 2.5.0-1.el8_10 | RLSA-2025:21974, RLSA-2025:21776 |
| Rocky Linux 8 | mingw-fontconfig | 2.12.6-4.el8_10 | RLSA-2026:3407 |
| Rocky Linux 8 | python3.12 | 3.12.13-2.el8_10 | RLSA-2026:10950 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| SLES 15 SP7 | expat | 2.7.1-150700.3.6.1 | SUSE-SU-2026:4619-1, SUSE-SU-2025:03508-1 |
| SLES 15 SP6 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| SLES 15 SP6 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLES 15 SP5 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| SLES 15 SP5 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLES 15 SP4 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| SLES 15 SP4 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLES 15 SP3 | expat | 2.7.1-150000.3.39.1 | SUSE-SU-2025:03537-1 |
Show 21 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | MozillaFirefox | 140.9.0-112.304.2 | SUSE-SU-2026:1127-1 |
| SLES 12 SP5 | expat | 2.7.1-21.46.1 | SUSE-SU-2026:4615-1, SUSE-SU-2025:03536-1 |
| SLES for SAP 16.0 | MozillaFirefox | 140.9.0-160000.1.1 | SUSE-SU-2026:20978-1 |
| SLES for SAP 16.0 | expat | 2.7.1-160000.3.1 | SUSE-SU-2025:21006-1 |
| SLES for SAP 15 SP6 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| SLES for SAP 15 SP6 | expat | 2.8.5-150400.3.40.1 | SUSE-SU-2026:4623-1 |
| SLES for SAP 15 SP5 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| SLES for SAP 15 SP5 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLES for SAP 15 SP4 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| SLES for SAP 15 SP4 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLES for SAP 15 SP3 | expat | 2.7.1-150000.3.39.1 | SUSE-SU-2025:03537-1 |
| SLES 16.0 | MozillaFirefox | 140.9.0-160000.1.1 | SUSE-SU-2026:20978-1 |
| SLES 16.0 | expat | 2.7.1-160000.3.1 | SUSE-SU-2025:21006-1 |
| SLE Micro 6.2 | expat | 2.7.1-160000.3.1 | SUSE-SU-2025:21028-1 |
| SLE Micro 6.1 | expat | 2.7.1-slfo.1.1_3.1 | SUSE-SU-2026:24554-1, SUSE-SU-2025:20895-1 |
| SLE Micro 6.0 | expat | 2.7.1-3.1 | SUSE-SU-2026:24323-1, SUSE-SU-2025:20868-1 |
| SLE Micro 5.5 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLE Micro 5.4 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLE Micro 5.3 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLE Micro 5.2 | expat | 2.7.1-150000.3.39.1 | SUSE-SU-2025:03537-1 |
| SLE Micro 5.1 | expat | 2.7.1-150000.3.39.1 | SUSE-SU-2025:03537-1 |
| SLE HPC 15 SP5 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| SLE HPC 15 SP5 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLE HPC 15 SP4 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| SLE HPC 15 SP4 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2026:4623-1, SUSE-SU-2025:03624-1 |
| SLE HPC 15 SP3 | expat | 2.7.1-150000.3.39.1 | SUSE-SU-2025:03537-1 |
| SUSE Manager Server LTS 4.3 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2025:03624-1 |
| SUSE Manager Proxy LTS 4.3 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2025:03624-1 |
| SUSE Enterprise Storage 7.1 | expat | 2.7.1-150000.3.39.1 | SUSE-SU-2025:03537-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 149.0-1.1 | openSUSE-SU-2026:10458-1 |
| openSUSE Tumbleweed | expat | 2.7.2-1.1 | openSUSE-SU-2025:15573-1 |
| openSUSE Tumbleweed | firefox-esr +1 | 140.9.0-1.1 | openSUSE-SU-2026:10447-1, openSUSE-SU-2026:10413-1 |
| openSUSE Leap 16.0 | MozillaFirefox | 140.9.0-160000.1.1 | openSUSE-SU-2026:20439-1 |
| openSUSE Leap 16.0 | expat | 2.7.1-160000.3.1 | openSUSE-SU-2025:20055-1 |
| openSUSE Leap 15.6 | MozillaFirefox | 140.9.0-150200.152.225.1 | SUSE-SU-2026:1126-1 |
| openSUSE Leap 15.6 | MozillaThunderbird | 140.9.0-150200.8.263.1 | SUSE-SU-2026:1163-1 |
| openSUSE Leap 15.6 | expat | 2.7.1-150400.3.31.1 | SUSE-SU-2025:03624-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | expat | 2.7.2-r0 | — |
| Alpine v3.23 | expat | 2.7.2-r0 | — |
| Alpine v3.22 | expat | 2.7.2-r0 | — |
| Alpine v3.21 | expat | 2.7.2-r0 | — |
| Alpine v3.20 | expat | 2.7.2-r0 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | expat | 2.7.2-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | expat +2 | 2.6.3-1.amzn2023.0.3 | ALAS2023-2025-1196 |
| Amazon Linux 2023 | firefox | 140.3.0-1.amzn2023.0.1 | ALAS2023-2025-1203 |
| Amazon Linux 2023 | xmlrpc-c +5 | 1.51.08-2.amzn2023.0.2 | ALAS2023-2025-1229 |
| Amazon Linux 2 | thunderbird | 140.3.0-1.amzn2.0.1 | ALAS2-2025-3008 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | expat | 2.6.4-2 | — |
| Azure Linux 2 (CBL-Mariner) | expat | 2.6.4-2 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | expat +1 | 2.7.1-1.el10_0.3 | ELSA-2025-21030, ELSA-2025-19403 |
| Oracle Linux 10 | python3 +7 | 3.12.13-2.0.1.el10_2 | ELSA-2026-19064 |
| Oracle Linux 9 | expat +1 | 2.5.0-5.el9_7.1 | ELSA-2025-22175 |
| Oracle Linux 9 | python3.12 +6 | 3.12.13-2.0.1.el9_8 | ELSA-2026-19177 |
| Oracle Linux 8 | expat +3 | 2.5.0-1.el8_10 | ELSA-2025-21974, ELSA-2025-21776 |
| Oracle Linux 8 | mingw32-fontconfig +1 | 2.12.6-4.el8_10 | ELSA-2026-3407 |
| Oracle Linux 8 | python3.12 +7 | 3.12.13-2.el8_10 | ELSA-2026-10950 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | expat | 2.7.2-r0 | — |
Advisories 50
- SSA-457936 SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7 Siemens ProductCERT · Nov 10, 2026
- WID-SEC-2026-0850 Mozilla Firefox und Mozilla Thunderbird: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
- SUSE-SU-2026:24554-1 Security update for expat SUSE / openSUSE Security Updates · Nov 7, 2026
- WID-SEC-2025-2045 expat: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Nov 5, 2026
- WID-SEC-2026-2189 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
- ALSA-2025:21030 Important: expat security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:19403 Important: expat security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19177 Important: python3.12 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:22175 Important: expat security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19064 Important: python3.12 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:21776 Important: expat security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3407 Important: mingw-fontconfig security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:10950 Important: python3.12 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:21974 Important: mingw-expat security update AlmaLinux Security Advisories · Oct 29, 2026
- SUSE-SU-2026:24323-1 Security update for expat SUSE / openSUSE Security Updates · Oct 27, 2026
- ICSA-26-062-03 Hitachi Energy RTU500 Product (Update A) CISA ICS & IT advisories · Oct 20, 2026
- SUSE-SU-2026:4619-1 Security update for expat SUSE / openSUSE Security Updates · Oct 19, 2026
- RHSA-2026:19177 Red Hat Security Advisory: python3.12 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:19064 Red Hat Security Advisory: python3.12 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:10950 Red Hat Security Advisory: python3.12 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:5396 Red Hat Security Advisory: Red Hat Hardened Images RPM Release Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:0078 Red Hat Security Advisory: spice-client-win security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:0077 Red Hat Security Advisory: spice-client-win security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:0076 Red Hat Security Advisory: spice-client-win security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:0001 Red Hat Security Advisory: spice-client-win security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2025:22871 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2025:22842 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2025:22607 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2025:22785 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2025:22034 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2025:22035 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2025:22033 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2025:21776 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- SUSE-SU-2026:4623-1 Security update for expat SUSE / openSUSE Security Updates · Oct 13, 2026
- SUSE-SU-2026:4615-1 Security update for expat SUSE / openSUSE Security Updates · Oct 13, 2026
- SSA-082556 SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 Siemens ProductCERT · Oct 13, 2026
- RHSA-2026:3407 Red Hat Security Advisory: mingw-fontconfig security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2025:22175 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:21974 Red Hat Security Advisory: mingw-expat security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:21773 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:21030 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2025:19403 Red Hat Security Advisory: expat security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- ICSA-26-279-05 Hitachi Energy REB500 CISA ICS & IT advisories · Oct 6, 2026
- WID-SEC-2026-2912 Dell PowerScale OneFS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 30, 2026
- USN-8790-1 expat vulnerabilities Ubuntu Security Notices (USN) · Sep 22, 2026
- WID-SEC-2026-0349 Dell Avamar und NetWorker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- WID-SEC-2026-2253 IBM Security Verify Access: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- WID-SEC-2026-0403 Apple macOS Tahoe, Sequoia und Sonoma: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 8, 2026
- WID-SEC-2026-0162 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 24, 2026
- WID-SEC-2026-1730 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Jul 16, 2026
References
- https://github.com/libexpat/libexpat/issues/1018
- https://github.com/libexpat/libexpat/pull/1034
- https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74
- https://issues.oss-fuzz.com/issues/439133977
- https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes