An XML parser library
c32fbcdd54
Backport fix for CVE-2026-45186 from upstream PR #1216 to expat-2.5.0. The patch introduces O(1) attribute collision detection using a new defaultAttsNames data structure in xmlparse.c, preventing a denial-of-service via duplicate attribute names. Seven test cases for duplicate attribute name handling are included, adapted to the 2.5.0 test layout (runtests.c). CVE: CVE-2026-45186 Upstream patches: - https://github.com/libexpat/libexpat/pull/1216.patch Resolves: RHEL-177978 This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent. Assisted-by: Ymir |
||
|---|---|---|
| .fmf | ||
| .gitignore | ||
| ci.fmf | ||
| expat-2.5.0-CVE-2023-52425.patch | ||
| expat-2.5.0-CVE-2024-8176.patch | ||
| expat-2.5.0-CVE-2024-28757.patch | ||
| expat-2.5.0-CVE-2024-45490.patch | ||
| expat-2.5.0-CVE-2024-45491.patch | ||
| expat-2.5.0-CVE-2024-45492.patch | ||
| expat-2.5.0-CVE-2024-50602.patch | ||
| expat-2.5.0-CVE-2025-59375.patch | ||
| expat-2.5.0-CVE-2026-45186.patch | ||
| expat.spec | ||
| gating.yaml | ||
| plans.fmf | ||
| sources | ||