[CLSA-2026:1790919520] expat: Fix of CVE-2026-93990
Type:
security
Severity:
Important
Release date:
2026-10-02 05:38:51 UTC
Description:
- CVE-2026-93990: reject a UTF-16 high surrogate that is not followed by a low surrogate, so malformed UTF-16 can no longer hide the following code unit from the tokenizer
CVEs fixed:
Updated packages:
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els9.i686.rpm
    sha:7df1e0bc651dbbbb668f0dc19878ffb60a11bef3421162ccf33bb614a47a1011
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els9.x86_64.rpm
    sha:f929e998c4b894163ef887649861aa9eaead7449aa1bbd80a5df516905561e7e
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els9.i686.rpm
    sha:0052c2755fd87666d540976469fa87f17d4ade36bc1e6982db5f199554c58ff3
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els9.x86_64.rpm
    sha:83d3e6dc0685f6c52a7740ece917042c87a386444f55707eea385b69f724944e
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els9.i686.rpm
    sha:e60003bca12d0d6e6639bb047041054c745e3105966fe7d1b645e91ae2b607c1
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els9.x86_64.rpm
    sha:07dac3152e27425bd3bb3bbd2765f3f2510cedaae8f30906b26b5e2c28e6f29e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.