[CLSA-2026:1791460196] expat: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-10-08 18:59:42 UTC
Description:
- CVE-2026-41080: seed the hash flooding protection with a full 16-byte SipHash key and 16 bytes of entropy instead of a single unsigned long, and add XML_SetHashSalt16Bytes() so callers can supply a 16-byte salt
Updated packages:
  • expat-2.5.0-6.el9_8.5.tuxcare.els2.aarch64.rpm
    sha:af072d60ad77cd74441e6ac15bd7fad3d4c5dd1d71a6b943b29ba79b87445cbe
  • expat-2.5.0-6.el9_8.5.tuxcare.els2.i686.rpm
    sha:86b2a521bae2978fef41e23de6c86a231a447e0d327116acddce4f444b678da9
  • expat-2.5.0-6.el9_8.5.tuxcare.els2.x86_64.rpm
    sha:d9627763a0beed09fa1c0d6373884014a1e0de14431a8f1313a2982b2b8c5cd7
  • expat-devel-2.5.0-6.el9_8.5.tuxcare.els2.aarch64.rpm
    sha:0fddac8f4fb5490dd2ff5e0f94e4293ca5775e6ab740b216c708aca48a12ddf8
  • expat-devel-2.5.0-6.el9_8.5.tuxcare.els2.i686.rpm
    sha:98002bcf152a7f02176b74d053f67257d4fba363e62196354da2b254dda0f30f
  • expat-devel-2.5.0-6.el9_8.5.tuxcare.els2.x86_64.rpm
    sha:d17777d2b0788573b9984b01dd4a2bc862281212d144601c894f06e829f2aa71
  • expat-static-2.5.0-6.el9_8.5.tuxcare.els2.aarch64.rpm
    sha:3481780a4dd674853d33f5a1bf86405c2d7ab0d940341ec924531b3426bbb285
  • expat-static-2.5.0-6.el9_8.5.tuxcare.els2.i686.rpm
    sha:bb735ff3c1724b120c7bf5a749ad947ccd53bafec5e66c2e780f243650af6517
  • expat-static-2.5.0-6.el9_8.5.tuxcare.els2.x86_64.rpm
    sha:4d5115908d11bf5b4bd605f5956ed0c35cf8540d663051317e399728a31930e2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.