ELSA-2026-72663

ELSA-2026-72663 - expat security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-09-28

Description


[2.5.0-6.5]
- Fix CVE-2026-66046: dtdCopy out-of-bounds access via isCdata hash lookup
- Resolves: RHEL-260179

[2.5.0-6.4]
- CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input
- Resolves: RHEL-269002


Related CVEs


CVE-2026-66046
CVE-2026-93990

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) expat-2.5.0-6.el9_8.5.src.rpm0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60-ol9_aarch64_appstream
expat-2.5.0-6.el9_8.5.src.rpm0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60-ol9_aarch64_baseos_latest
expat-2.5.0-6.el9_8.5.src.rpm0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60-ol9_aarch64_u8_baseos_patch
expat-2.5.0-6.el9_8.5.aarch64.rpm9acee34adc406434d68783edacdab4b60f97dab41ab486dbceda194163e3b05a-ol9_aarch64_baseos_latest
expat-2.5.0-6.el9_8.5.aarch64.rpm9acee34adc406434d68783edacdab4b60f97dab41ab486dbceda194163e3b05a-ol9_aarch64_u8_baseos_patch
expat-devel-2.5.0-6.el9_8.5.aarch64.rpm7e6465ac9268c781f0517643697546dd5d107be9805508208b48158ec8253d90-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) expat-2.5.0-6.el9_8.5.src.rpm0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60-ol9_x86_64_appstream
expat-2.5.0-6.el9_8.5.src.rpm0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60-ol9_x86_64_baseos_latest
expat-2.5.0-6.el9_8.5.src.rpm0527c1e02e3a0a3537e482527a316b509be3c530b0a30383a4059a1d9d3c4f60-ol9_x86_64_u8_baseos_patch
expat-2.5.0-6.el9_8.5.i686.rpm3745fbaae814625bae5256324dcfe3e8c3fccc4bf5181745da0433616ecc7348-ol9_x86_64_baseos_latest
expat-2.5.0-6.el9_8.5.i686.rpm3745fbaae814625bae5256324dcfe3e8c3fccc4bf5181745da0433616ecc7348-ol9_x86_64_u8_baseos_patch
expat-2.5.0-6.el9_8.5.x86_64.rpmba3ee076362767de2ba801e01b3b314b597617f64a9b6fbff3ea8c17e6430f90-ol9_x86_64_baseos_latest
expat-2.5.0-6.el9_8.5.x86_64.rpmba3ee076362767de2ba801e01b3b314b597617f64a9b6fbff3ea8c17e6430f90-ol9_x86_64_u8_baseos_patch
expat-devel-2.5.0-6.el9_8.5.i686.rpmefd1a498f1302eb18979c8cafe11b275961faab2431f41d4509bca9aa7ae8205-ol9_x86_64_appstream
expat-devel-2.5.0-6.el9_8.5.x86_64.rpm022a0de2c923646b2adfa365f648e0b0035c42bc398a746aec9aec38299049dd-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete