[ALSA-2026:64809] Moderate: expat security update
Type:
security
Severity:
moderate
Release date:
2026-09-08
Description:
Expat is a C library for parsing XML documents. Security Fix(es): * expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) * expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 expat-2.5.0-2.el8_10.2.aarch64.rpm 10cfde79895f1d80e72b14c0b2fe88ac9ec12ddfd51036a1586eb530f8b65e95
aarch64 expat-devel-2.5.0-2.el8_10.2.aarch64.rpm 61f167aceb3922f9cb17f4726c87e351641f47a4be1ad4eee4ef154a4d60bb15
i686 expat-2.5.0-2.el8_10.2.i686.rpm 919f5bbc292b594dc7d54a32ecc44eb8877f795d7e6b82026b9a7219861d94af
i686 expat-devel-2.5.0-2.el8_10.2.i686.rpm 9af04535241942c4c3f785004ffde8f7109d668a841430dcc1286140c91b5434
ppc64le expat-devel-2.5.0-2.el8_10.2.ppc64le.rpm 0d7d2bbc8df38d3a97a0bfe86858dfddcc16afa59ec6a82ca6fedf41feadb419
ppc64le expat-2.5.0-2.el8_10.2.ppc64le.rpm ecb613b15c44f1644ee4454226b56a6aa43faa2f1122958f5427221c25bfcd2f
s390x expat-devel-2.5.0-2.el8_10.2.s390x.rpm 7ebc9663016d9521ca7882d77dbfff34cefc2f2c2a7766622d1706135974b6e2
s390x expat-2.5.0-2.el8_10.2.s390x.rpm d2973b43eec97d4c82f31ad855d98110f05b1f549e59ac3aba2385fd4d61875f
x86_64 expat-2.5.0-2.el8_10.2.x86_64.rpm 913ef24d58dadc08a5cf49277ce22183876cf0ef17df59ff7c9d82ccf17c67b6
x86_64 expat-devel-2.5.0-2.el8_10.2.x86_64.rpm c1d4b78c911fbbfb5bbce0e228ac25863589dc464f1d57d389fdfa3b399c8e20
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.