Expat 2.10.0 released with four security fixes
Fixes DoS vulnerabilities including billion laughs attacks and integer overflow issues
1
Stories per day · 30 days
2 RSS
8 stories, newest first · one card per story
Stories tagged #expat
libexpat 2.10.0 fixes four vulnerabilities
libexpat 2.10.0 releases fixes for CVE-2026-113351, CVE-2026-115506, CVE-2026-117610 and CVE-2026-118370.
USN-8872-1: libxmltok vulnerabilities
Ubuntu fixed libxmltok integer flaws CVE-2026-56404 and CVE-2026-56405 that can crash processes via crafted files.
libexpat 2.9.0 fixes two vulnerabilities
libexpat 2.9.0 patches CVE-2026-77214 and CVE-2026-102633, including a 32-bit integer overflow.
USN-8813-1: Expat vulnerabilities
Ubuntu's USN-8813-1 patches Expat flaws that can crash the parser or allow code execution.
libexpat 2.8.5 fixes CVE-2026-93990 (malformed UTF-16 smuggling)
libexpat 2.8.5 fixes CVE-2026-93990 by rejecting malformed UTF-16 that could be smuggled into applications.
USN-8790-1: Expat vulnerabilities
Ubuntu patched three Expat denial-of-service vulnerabilities, including excessive memory allocation on crafted documents and an infinite loop on DTD content.
USN-8744-1: Python vulnerabilities
Ubuntu issued USN-8744-1 fixing CVE-2026-3644, a Python http.cookies content-injection flaw, plus a pyexpat recursion DoS across six Ubuntu LTS releases.