Advisory: CLSA-2026:1767799681
OS: CentOS 8.5 ELS
Public date: 2026-01-07 15:28:03.433805
Project: expat
Version: 2.5.0-1.el8.tuxcare.els1
Errata link: https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1767799681.html
- Rebase to version 2.5.0 - CVE-2024-28757: prevent billion laughs attacks in isolated external parser (part of #839), reject direct parameter entity recursion (part of #839) - CVE-2025-59375: fix memory amplification and add allocation tracker - CVE-2013-0340: properly handle entities expansion
Update command: dnf update expat*
expat-2.5.0-1.el8.tuxcare.els1.i686.rpm expat-2.5.0-1.el8.tuxcare.els1.x86_64.rpm expat-devel-2.5.0-1.el8.tuxcare.els1.i686.rpm expat-devel-2.5.0-1.el8.tuxcare.els1.x86_64.rpm expat-static-2.5.0-1.el8.tuxcare.els1.x86_64.rpm