An XML parser library
5b5ef91cf2
Backport upstream PR #1272 (5 commits) to fix CVE-2026-56132, an out-of-bound scaffolding index store in doProlog. The fix introduces independent tracking of scaffIndex allocation size and adds bounds checking at use sites, preventing out-of-bounds writes during XML DTD parsing. CVE: CVE-2026-56132 Upstream patches: - https://github.com/libexpat/libexpat/pull/1272.patch Resolves: RHEL-221012 This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent. Assisted-by: Ymir |
||
|---|---|---|
| .fmf | ||
| .gitignore | ||
| ci.fmf | ||
| expat-2.5.0-CVE-2023-52425.patch | ||
| expat-2.5.0-CVE-2024-8176.patch | ||
| expat-2.5.0-CVE-2024-28757.patch | ||
| expat-2.5.0-CVE-2024-45490.patch | ||
| expat-2.5.0-CVE-2024-45491.patch | ||
| expat-2.5.0-CVE-2024-45492.patch | ||
| expat-2.5.0-CVE-2024-50602.patch | ||
| expat-2.5.0-CVE-2025-59375.patch | ||
| expat-2.5.0-CVE-2026-45186.patch | ||
| expat-2.5.0-CVE-2026-50219.patch | ||
| expat-2.5.0-CVE-2026-56132.patch | ||
| expat.spec | ||
| gating.yaml | ||
| plans.fmf | ||
| sources | ||