ELSA-2026-72448

ELSA-2026-72448 - expat security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-29

Description

[2.5.0-4]
- Fix CVE-2026-66046 in expat
- Resolves: RHEL-260142

[2.5.0-3]
- CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input
- Resolves: RHEL-268995

Related CVEs

CVE-2026-66046

CVE-2026-93990

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	expat-2.5.0-4.el8_10.src.rpm	18145a38d1805391b88abb701ab2c5a62817d674cf739200be08454b34af3024	-	ol8_aarch64_baseos_latest
	expat-2.5.0-4.el8_10.src.rpm	18145a38d1805391b88abb701ab2c5a62817d674cf739200be08454b34af3024	-	ol8_aarch64_u10_baseos_patch
	expat-2.5.0-4.el8_10.aarch64.rpm	3919f4871ad84bbb3a193ef59804c5dca2f1cbebd15d970df935e9e11446ccaa	-	ol8_aarch64_baseos_latest
	expat-2.5.0-4.el8_10.aarch64.rpm	3919f4871ad84bbb3a193ef59804c5dca2f1cbebd15d970df935e9e11446ccaa	-	ol8_aarch64_u10_baseos_patch
	expat-devel-2.5.0-4.el8_10.aarch64.rpm	b0290131d69d096d2e6a52b95bfc731a53003732bc953792358bbffa5937eb20	-	ol8_aarch64_baseos_latest
	expat-devel-2.5.0-4.el8_10.aarch64.rpm	b0290131d69d096d2e6a52b95bfc731a53003732bc953792358bbffa5937eb20	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	expat-2.5.0-4.el8_10.src.rpm	18145a38d1805391b88abb701ab2c5a62817d674cf739200be08454b34af3024	-	ol8_x86_64_baseos_latest
	expat-2.5.0-4.el8_10.src.rpm	18145a38d1805391b88abb701ab2c5a62817d674cf739200be08454b34af3024	-	ol8_x86_64_u10_baseos_patch
	expat-2.5.0-4.el8_10.i686.rpm	30741fa4691c86f342c09e7f3d6fbc42479ae59137a9e13b65209a9c335b829b	-	ol8_x86_64_baseos_latest
	expat-2.5.0-4.el8_10.i686.rpm	30741fa4691c86f342c09e7f3d6fbc42479ae59137a9e13b65209a9c335b829b	-	ol8_x86_64_u10_baseos_patch
	expat-2.5.0-4.el8_10.x86_64.rpm	3ea18b305044fbd8e445b5584216c1f56aabf4a818ba5090d13aa80b16fc454e	-	ol8_x86_64_baseos_latest
	expat-2.5.0-4.el8_10.x86_64.rpm	3ea18b305044fbd8e445b5584216c1f56aabf4a818ba5090d13aa80b16fc454e	-	ol8_x86_64_u10_baseos_patch
	expat-devel-2.5.0-4.el8_10.i686.rpm	4e1e6157bf5fe1c0651b1d71caee1f0be9fecae9e18f6a3d9d2f375ff3570a85	-	ol8_x86_64_baseos_latest
	expat-devel-2.5.0-4.el8_10.i686.rpm	4e1e6157bf5fe1c0651b1d71caee1f0be9fecae9e18f6a3d9d2f375ff3570a85	-	ol8_x86_64_u10_baseos_patch
	expat-devel-2.5.0-4.el8_10.x86_64.rpm	51d1f5c251634b6bc90c00f46a51d9a18fe69daa17c06b3f50ec5889374ff0da	-	ol8_x86_64_baseos_latest
	expat-devel-2.5.0-4.el8_10.x86_64.rpm	51d1f5c251634b6bc90c00f46a51d9a18fe69daa17c06b3f50ec5889374ff0da	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team