[ALSA-2026:88247] Important: expat security update
Type:
security
Severity:
important
Release date:
2026-10-23
Description:
Expat is a C library for parsing XML documents. Security Fix(es): * expat: expat: Denial of Service via integer overflow in expat_realloc (CVE-2026-102633) * expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer (CVE-2026-77214) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 expat-devel-2.5.0-6.el9_8.7.aarch64.rpm 8680640631140351474e512d849bf14c3d54dcd5283abc4f427e4a83369712e2
aarch64 expat-2.5.0-6.el9_8.7.aarch64.rpm 96243b15564c845716904f0419de9fecc2321f0488ee7092e5913183f7da2ad9
i686 expat-2.5.0-6.el9_8.7.i686.rpm 2038e4b5bab28d80e181746baea022ef1f6a539a73e92dfd8f434e79c240b029
i686 expat-devel-2.5.0-6.el9_8.7.i686.rpm 5f234e56ba315e9d909ec00947f689dfbbfaf247ecbc6a958932065bd75a51e8
ppc64le expat-2.5.0-6.el9_8.7.ppc64le.rpm 71709cd4aba99aa8ddda1dc3934aa6bb1008de84b1f4481384b5945ebee3ea04
ppc64le expat-devel-2.5.0-6.el9_8.7.ppc64le.rpm e5037b5f01722da8b31bf65088c919e614b16536e93fb383087d08522c28c7c0
s390x expat-2.5.0-6.el9_8.7.s390x.rpm 065cfa8cc098556d5f85c39d90259a742717daa31f91ba68e754577cf55929ec
s390x expat-devel-2.5.0-6.el9_8.7.s390x.rpm 3e8fa3448fe72db50e3776202d5700801cb4ed36d4d4ad1d1dcf0c87b13c7fb8
x86_64 expat-devel-2.5.0-6.el9_8.7.x86_64.rpm 1ddf50958517e1be7ce4ae3a0702c3ceefc9449953a231cfae3e5f4bbe247968
x86_64 expat-2.5.0-6.el9_8.7.x86_64.rpm 8eff780d40cc8bc4f54dd8fd958c692be936afd065afd14eb55caac001ba40f1
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.