Most recent entries from all

ALSA-2026:64809 — Moderate: expat security update

Affected: AlmaLinux:8: expat, AlmaLinux:8: expat-devel

Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) * expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-56132

Affected: Alpaquita:23: expat, Alpaquita:25: expat, Alpaquita:stream: expat, BellSoft Hardened Containers:23: expat, BellSoft Hardened Containers:25: expat, BellSoft Hardened Containers:stream: expat

certfr-2026-avi-1249 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2026-avi-1249

EUVD-2026-328903

fkie_cve-2026-56132

In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

GHSA-425r-vwq2-26qv

msrc_CVE-2026-56132 — In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing arra…

msrc_CVE-2026-56132

OESA-2026-2768 — expat security update

Affected: openEuler:22.03-LTS-SP4: expat

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fix(es):

libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).(CVE-2026-56131)

openSUSE-SU-2026:11584-1 — expat-2.8.2-1.1 on GA media

expat-2.8.2-1.1 on GA media

RHSA-2026:30647 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

RLSA-2026:64809 — Moderate: expat security update

Affected: Rocky Linux:8: expat

Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219)

* expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:23894-1 — Security update for expat

Security update for expat

UBUNTU-CVE-2026-56132

Affected: Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: vtk, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:Pro:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: cadaver, Ubuntu:Pro:16.04:LTS: coin3 and 59 more

WID-SEC-W-2026-2008 — expat: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in expat ausnutzen, um einen Denial of Service Angriff durchzuführen oder potentiell Code auszuführen.