An XML parser library
Go to file
RHEL Packaging Agent 4eb28dada0 Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers
Add backport patch for CVE-2026-50219. The patch introduces
handler call depth tracking in the expat XML parser library.
It includes an explicit C++ compatible cast in the test suite
to ensure the patch builds correctly in both C and C++ modes.

CVE: CVE-2026-50219
Upstream patches:
 - https://github.com/libexpat/libexpat/pull/1246.patch
Resolves: RHEL-220979

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-31 11:23:14 +00:00
.fmf Add fmf plans and update gating.yaml 2024-09-11 16:05:14 +02:00
.gitignore Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00
ci.fmf Add fmf plans and update gating.yaml 2024-09-11 16:05:14 +02:00
expat-2.5.0-CVE-2023-52425.patch Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00
expat-2.5.0-CVE-2024-8176.patch Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00
expat-2.5.0-CVE-2024-28757.patch Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00
expat-2.5.0-CVE-2024-45490.patch Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00
expat-2.5.0-CVE-2024-45491.patch Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00
expat-2.5.0-CVE-2024-45492.patch Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00
expat-2.5.0-CVE-2024-50602.patch Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00
expat-2.5.0-CVE-2025-59375.patch Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00
expat-2.5.0-CVE-2026-45186.patch expat: backport CVE-2026-45186 fix (attribute collision check DoS) 2026-05-28 11:42:32 +00:00
expat-2.5.0-CVE-2026-50219.patch Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers 2026-07-31 11:23:14 +00:00
expat.spec Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers 2026-07-31 11:23:14 +00:00
gating.yaml Add fmf plans and update gating.yaml 2024-09-11 16:05:14 +02:00
plans.fmf Add fmf plans and update gating.yaml 2024-09-11 16:05:14 +02:00
sources Rebase to version 2.5.0 2025-11-19 10:34:09 +01:00