[ALSA-2026:72663] Important: expat security update
Type:
security
Severity:
important
Release date:
2026-10-01
Description:
Expat is a C library for parsing XML documents. Security Fix(es): * expat: Expat: Denial of Service via quadratic complexity in attribute processing (CVE-2026-66046) * expat: Expat: XML Injection via Malformed UTF-16 Input (CVE-2026-93990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 expat-devel-2.5.0-6.el9_8.5.aarch64.rpm 16890ec0610a8b370559c58b394b431bfb7d848af0b942dab0c6c09acc704bc9
aarch64 expat-2.5.0-6.el9_8.5.aarch64.rpm 654ec82750b3ad01d22562b63af696982b14a1e2af3107e5315630b5c1249e61
i686 expat-devel-2.5.0-6.el9_8.5.i686.rpm 24ed7143703b956ba09fae2f9007f55214500ca2767647c352dba331860f25a0
i686 expat-2.5.0-6.el9_8.5.i686.rpm 80204f6db92383fd97c503ea08852fded21e4d2323e225dbf6b10c5a15515d2f
ppc64le expat-devel-2.5.0-6.el9_8.5.ppc64le.rpm 827a10ba9a36bc4c470d2078607435a477262e417561205cee398f8838c516b3
ppc64le expat-2.5.0-6.el9_8.5.ppc64le.rpm d7c4ca891b809bbc96181a15670928684867f4acd58a02e24332adafd1ff6b0a
s390x expat-2.5.0-6.el9_8.5.s390x.rpm 09014a696d9b238e681f53da9af624fa8c390e8a60d71674fc530e1ecefcc0ae
s390x expat-devel-2.5.0-6.el9_8.5.s390x.rpm dd21900f9e58c684adf493d66168a96a7920625ed1251232413c0a5428f5a9f3
x86_64 expat-2.5.0-6.el9_8.5.x86_64.rpm 53914e26875f00614e7d5344a9641ad209ff4143e4508a5b35861ea3c3ec0b36
x86_64 expat-devel-2.5.0-6.el9_8.5.x86_64.rpm 84b59c2bd7b70176d91ad17474ad30257b1c26b16ebe82a8ec13515cf2fde4ef
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.