ELSA-2026-22715

ELSA-2026-22715 - expat security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-16

Description

[2.7.3-57]
- expat: backport CVE-2026-45186 fix (attribute collision check DoS)

[2.7.3-56]
- Rebase to 2.7.3 and add VCS tag

* Thu Jun 05 2025 psklenar@redhat.com
- https://issues.redhat.com/browse/RHELMISC-13073

* Fri Mar 28 2025 Tomas Korbar
- Fix behavior change caused by fix for CVE-2024-8176

* Fri Mar 14 2025 Tomas Korbar
- Fix CVE-2024-8176

* Thu Nov 07 2024 Tomas Korbar
- Rebase to 2.6.4

* Tue Oct 29 2024 Troy Dawson
- Bump release for October 2024 mass rebuild:

* Wed Jul 03 2024 Tomas Korbar
- Rebase to 2.6.2

* Mon Jun 24 2024 Troy Dawson
- Bump release for June 2024 mass rebuild

* Fri Jun 21 2024 Frantisek Hrdina
- Update of fmf plans and gating for c10s

Related CVEs

CVE-2026-45186

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	expat-2.7.3-1.el10_2.1.src.rpm	ca239567c96602fe222c8b4428fbb816264cee3cc9e691ebf939da9c02956cb2	-	ol10_aarch64_appstream
	expat-2.7.3-1.el10_2.1.src.rpm	ca239567c96602fe222c8b4428fbb816264cee3cc9e691ebf939da9c02956cb2	-	ol10_aarch64_baseos_latest
	expat-2.7.3-1.el10_2.1.src.rpm	ca239567c96602fe222c8b4428fbb816264cee3cc9e691ebf939da9c02956cb2	-	ol10_aarch64_u2_baseos_patch
	expat-2.7.3-1.el10_2.1.aarch64.rpm	efc0ab4fadb6bdb1df482cff72f4b55f5232eb3d0a8efbbde06e3d7be675f850	-	ol10_aarch64_baseos_latest
	expat-2.7.3-1.el10_2.1.aarch64.rpm	efc0ab4fadb6bdb1df482cff72f4b55f5232eb3d0a8efbbde06e3d7be675f850	-	ol10_aarch64_u2_baseos_patch
	expat-devel-2.7.3-1.el10_2.1.aarch64.rpm	b8fb253425d54d63639d745753938b39dccb27e7dc6fd8c1b42a493c9b1297ca	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	expat-2.7.3-1.el10_2.1.src.rpm	ca239567c96602fe222c8b4428fbb816264cee3cc9e691ebf939da9c02956cb2	-	ol10_x86_64_appstream
	expat-2.7.3-1.el10_2.1.src.rpm	ca239567c96602fe222c8b4428fbb816264cee3cc9e691ebf939da9c02956cb2	-	ol10_x86_64_baseos_latest
	expat-2.7.3-1.el10_2.1.src.rpm	ca239567c96602fe222c8b4428fbb816264cee3cc9e691ebf939da9c02956cb2	-	ol10_x86_64_u2_baseos_patch
	expat-2.7.3-1.el10_2.1.x86_64.rpm	d02c87eb261f14c965cdf175692f4c74e4ecbdb339b8c4623c51f56f5bbf1c08	-	ol10_x86_64_baseos_latest
	expat-2.7.3-1.el10_2.1.x86_64.rpm	d02c87eb261f14c965cdf175692f4c74e4ecbdb339b8c4623c51f56f5bbf1c08	-	ol10_x86_64_u2_baseos_patch
	expat-devel-2.7.3-1.el10_2.1.x86_64.rpm	f9de60ef048b53afbd717ae1fd36f97016db34a544810ce172d602828d0c8eff	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team