Release date:
2026-08-17 14:20:05 UTC
Description:
* SECURITY UPDATE: Out-of-bounds read and resultant infinite loop
because low surrogates are treated the same as high surrogates in
the *_toUtf16 functions (libexpat before 2.8.3)
- debian/patches/CVE-2026-72522.patch: mask the high byte with 0xFC
instead of 0xF8 so the split-surrogate guard in
DEFINE_UTF16_TO_UTF16 matches only genuine high surrogates
(0xD800-0xDBFF) and no longer accepts low ones (0xDC00-0xDFFF);
also carries upstream's regression test into tests/runtests.c
(2.2.6 has no tests/misc_tests.c), which exercises the wide
-DXML_UNICODE build only
- CVE-2026-72522
Updated packages:
-
expat_2.2.6-2+deb10u7+tuxcare.els8_amd64.deb
sha:2111f5b6848cefc25fae6380fa9897d55a01c2e8
-
libexpat1_2.2.6-2+deb10u7+tuxcare.els8_amd64.deb
sha:74717f1b2f56f78ec94de50463c43b7f1f040c81
-
libexpat1-dev_2.2.6-2+deb10u7+tuxcare.els8_amd64.deb
sha:aa6f6ba27598366ed9a72bbc548ad89341970ef9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
