ELSA-2026-72663

ELSA-2026-72663 - expat security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-28

Description

[2.5.0-6.5]
- Fix CVE-2026-66046: dtdCopy out-of-bounds access via isCdata hash lookup
- Resolves: RHEL-260179

[2.5.0-6.4]
- CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input
- Resolves: RHEL-269002

Related CVEs

CVE-2026-66046

CVE-2026-93990

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	expat-2.5.0-6.el9_8.5.src.rpm	0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60	-	ol9_aarch64_appstream
	expat-2.5.0-6.el9_8.5.src.rpm	0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60	-	ol9_aarch64_baseos_latest
	expat-2.5.0-6.el9_8.5.src.rpm	0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60	-	ol9_aarch64_u8_baseos_patch
	expat-2.5.0-6.el9_8.5.aarch64.rpm	9acee34adc406434d68783edacdab4b60f97dab41ab486dbceda194163e3b05a	-	ol9_aarch64_baseos_latest
	expat-2.5.0-6.el9_8.5.aarch64.rpm	9acee34adc406434d68783edacdab4b60f97dab41ab486dbceda194163e3b05a	-	ol9_aarch64_u8_baseos_patch
	expat-devel-2.5.0-6.el9_8.5.aarch64.rpm	7e6465ac9268c781f0517643697546dd5d107be9805508208b48158ec8253d90	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	expat-2.5.0-6.el9_8.5.src.rpm	0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60	-	ol9_x86_64_appstream
	expat-2.5.0-6.el9_8.5.src.rpm	0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60	-	ol9_x86_64_baseos_latest
	expat-2.5.0-6.el9_8.5.src.rpm	0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60	-	ol9_x86_64_u8_baseos_patch
	expat-2.5.0-6.el9_8.5.i686.rpm	3745fbaae814625bae5256324dcfe3e8c3fccc4bf5181745da0433616ecc7348	-	ol9_x86_64_baseos_latest
	expat-2.5.0-6.el9_8.5.i686.rpm	3745fbaae814625bae5256324dcfe3e8c3fccc4bf5181745da0433616ecc7348	-	ol9_x86_64_u8_baseos_patch
	expat-2.5.0-6.el9_8.5.x86_64.rpm	ba3ee076362767de2ba801e01b3b314b597617f64a9b6fbff3ea8c17e6430f90	-	ol9_x86_64_baseos_latest
	expat-2.5.0-6.el9_8.5.x86_64.rpm	ba3ee076362767de2ba801e01b3b314b597617f64a9b6fbff3ea8c17e6430f90	-	ol9_x86_64_u8_baseos_patch
	expat-devel-2.5.0-6.el9_8.5.i686.rpm	efd1a498f1302eb18979c8cafe11b275961faab2431f41d4509bca9aa7ae8205	-	ol9_x86_64_appstream
	expat-devel-2.5.0-6.el9_8.5.x86_64.rpm	022a0de2c923646b2adfa365f648e0b0035c42bc398a746aec9aec38299049dd	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team