ELSA-2026-92323

ELSA-2026-92323 - expat security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-29

Description

[2.5.0-6]
- CVE-2026-102633 expat: expat: Denial of Service via integer overflow
in expat_realloc
- Resolves: RHEL-272828

[2.5.0-5]
- CVE-2026-77214 expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer
over-read in XML_ParseBuffer
- Resolves: RHEL-277497

Related CVEs

CVE-2026-102633

CVE-2026-77214

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	expat-2.5.0-6.el8_10.src.rpm	b2052becfe5d5d0853cf37632ca7fe5322db7fb8ee75566c537f2858b9c79cae	-	ol8_aarch64_baseos_latest
	expat-2.5.0-6.el8_10.src.rpm	b2052becfe5d5d0853cf37632ca7fe5322db7fb8ee75566c537f2858b9c79cae	-	ol8_aarch64_u10_baseos_patch
	expat-2.5.0-6.el8_10.aarch64.rpm	86510b9f2692e359e12ae4addeee732f063ae7d6f52ff719a8e1bc0cabb6208f	-	ol8_aarch64_baseos_latest
	expat-2.5.0-6.el8_10.aarch64.rpm	86510b9f2692e359e12ae4addeee732f063ae7d6f52ff719a8e1bc0cabb6208f	-	ol8_aarch64_u10_baseos_patch
	expat-devel-2.5.0-6.el8_10.aarch64.rpm	a8951025b5e98143e15e5042ba64ed50582822b037ba82a4911cd9ff04146214	-	ol8_aarch64_baseos_latest
	expat-devel-2.5.0-6.el8_10.aarch64.rpm	a8951025b5e98143e15e5042ba64ed50582822b037ba82a4911cd9ff04146214	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	expat-2.5.0-6.el8_10.src.rpm	b2052becfe5d5d0853cf37632ca7fe5322db7fb8ee75566c537f2858b9c79cae	-	ol8_x86_64_baseos_latest
	expat-2.5.0-6.el8_10.src.rpm	b2052becfe5d5d0853cf37632ca7fe5322db7fb8ee75566c537f2858b9c79cae	-	ol8_x86_64_u10_baseos_patch
	expat-2.5.0-6.el8_10.i686.rpm	aa0e5440bd3a5fccc9e025de8229bea7f525f8144eda4f77a793ba497d200872	-	ol8_x86_64_baseos_latest
	expat-2.5.0-6.el8_10.i686.rpm	aa0e5440bd3a5fccc9e025de8229bea7f525f8144eda4f77a793ba497d200872	-	ol8_x86_64_u10_baseos_patch
	expat-2.5.0-6.el8_10.x86_64.rpm	e1634a7ef12d68cf77f8162605e7b94773b79daf833f78d28b1543109179f3e8	-	ol8_x86_64_baseos_latest
	expat-2.5.0-6.el8_10.x86_64.rpm	e1634a7ef12d68cf77f8162605e7b94773b79daf833f78d28b1543109179f3e8	-	ol8_x86_64_u10_baseos_patch
	expat-devel-2.5.0-6.el8_10.i686.rpm	8ed07fc9e11bad497aeb79781ad5f7c24a5dd064b3cc01c940b1065d4fc4e798	-	ol8_x86_64_baseos_latest
	expat-devel-2.5.0-6.el8_10.i686.rpm	8ed07fc9e11bad497aeb79781ad5f7c24a5dd064b3cc01c940b1065d4fc4e798	-	ol8_x86_64_u10_baseos_patch
	expat-devel-2.5.0-6.el8_10.x86_64.rpm	0accd31e3451c89188e8b2b595c3721bacc2e15b56dfaeef03dd464f44e03738	-	ol8_x86_64_baseos_latest
	expat-devel-2.5.0-6.el8_10.x86_64.rpm	0accd31e3451c89188e8b2b595c3721bacc2e15b56dfaeef03dd464f44e03738	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team