ELSA-2026-88247

ELSA-2026-88247 - expat security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-22

Description

[2.5.0-6.7]
- CVE-2026-102633 expat: expat: Denial of Service via integer overflow
in expat_realloc
- Resolves: RHEL-272833

[2.5.0-6.6]
- CVE-2026-77214 expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer
over-read in XML_ParseBuffer
- Resolves: RHEL-277510

Related CVEs

CVE-2026-102633

CVE-2026-77214

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	expat-2.5.0-6.el9_8.7.src.rpm	fede0774af1c23dcf092c0a19c01aaf62efe2f3b0b495cfcb5bab1d5c64b14a9	-	ol9_aarch64_appstream
	expat-2.5.0-6.el9_8.7.src.rpm	fede0774af1c23dcf092c0a19c01aaf62efe2f3b0b495cfcb5bab1d5c64b14a9	-	ol9_aarch64_baseos_latest
	expat-2.5.0-6.el9_8.7.src.rpm	fede0774af1c23dcf092c0a19c01aaf62efe2f3b0b495cfcb5bab1d5c64b14a9	-	ol9_aarch64_u8_baseos_patch
	expat-2.5.0-6.el9_8.7.aarch64.rpm	a43316efd31ff608b8d01156b0f236ae0fbcb1a8b5e84d61ab98da1d922cc208	-	ol9_aarch64_baseos_latest
	expat-2.5.0-6.el9_8.7.aarch64.rpm	a43316efd31ff608b8d01156b0f236ae0fbcb1a8b5e84d61ab98da1d922cc208	-	ol9_aarch64_u8_baseos_patch
	expat-devel-2.5.0-6.el9_8.7.aarch64.rpm	f730c9e81e74e50967c8a1d5b166b5583dfa96bab727c4cfff0ca47896299c75	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	expat-2.5.0-6.el9_8.7.src.rpm	fede0774af1c23dcf092c0a19c01aaf62efe2f3b0b495cfcb5bab1d5c64b14a9	-	ol9_x86_64_appstream
	expat-2.5.0-6.el9_8.7.src.rpm	fede0774af1c23dcf092c0a19c01aaf62efe2f3b0b495cfcb5bab1d5c64b14a9	-	ol9_x86_64_baseos_latest
	expat-2.5.0-6.el9_8.7.src.rpm	fede0774af1c23dcf092c0a19c01aaf62efe2f3b0b495cfcb5bab1d5c64b14a9	-	ol9_x86_64_u8_baseos_patch
	expat-2.5.0-6.el9_8.7.i686.rpm	8dd94eeed4f48ebdc4772dd3ef05461ebad1b76d2ce589035a339def3bd08f10	-	ol9_x86_64_baseos_latest
	expat-2.5.0-6.el9_8.7.i686.rpm	8dd94eeed4f48ebdc4772dd3ef05461ebad1b76d2ce589035a339def3bd08f10	-	ol9_x86_64_u8_baseos_patch
	expat-2.5.0-6.el9_8.7.x86_64.rpm	40edd98effd6889d66ef7c2c0b6c9e48b9fcc190001f3961bd3bb51669951370	-	ol9_x86_64_baseos_latest
	expat-2.5.0-6.el9_8.7.x86_64.rpm	40edd98effd6889d66ef7c2c0b6c9e48b9fcc190001f3961bd3bb51669951370	-	ol9_x86_64_u8_baseos_patch
	expat-devel-2.5.0-6.el9_8.7.i686.rpm	55fcae71df58132bb24d5f7bec611a0e108d79a50d99a593ae368dc00e701da8	-	ol9_x86_64_appstream
	expat-devel-2.5.0-6.el9_8.7.x86_64.rpm	14afe5c414e20b960a76c607d3677c4b348821497e45f6fc0461d8679eeaaf53	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team