libexpat 2.10.0 fixes four vulnerabilities
libexpat 2.10.0 releases fixes for CVE-2026-113351, CVE-2026-115506, CVE-2026-117610 and CVE-2026-118370.
5 stories, newest first · one card per story
libexpat 2.10.0 releases fixes for CVE-2026-113351, CVE-2026-115506, CVE-2026-117610 and CVE-2026-118370.

Errata also cover a remotely triggerable IPsec AES-GMAC kernel heap overflow on specific hardware; AES-GCM is unaffected.
Hitachi Energy REB500 8.3.3.1 and earlier can be crashed via libexpat flaws in IEC 61850 parsing.
libexpat 2.9.0 patches CVE-2026-77214 and CVE-2026-102633, including a 32-bit integer overflow.
libexpat 2.8.5 fixes CVE-2026-93990 by rejecting malformed UTF-16 that could be smuggled into applications.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views