-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 31 Aug 2026 20:26:45 +0200
Source: expat
Architecture: source
Version: 2.5.0-1+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
expat (2.5.0-1+deb12u3) bookworm-security; urgency=high
.
* Backport upstream security patches:
* CVE-2026-50219: Add handler call depth tracking and guard
XML_* and m_*Handler.
* CVE-2026-56131: Guard XML_ResumeParser against being called from
within a handler.
* CVE-2026-56403: Add overflow checks to storeAtts() and xmlwf's
xcsdup().
* CVE-2026-56404: Add an overflow check to addBinding().
* CVE-2026-56405: Add an overflow check to getAttributeId().
* CVE-2026-56406: Add an overflow check to XML_ParseBuffer().
* CVE-2026-56407: Add an overflow check when capping entity text
length.
* CVE-2026-56408: Add an overflow check to copyString().
* CVE-2026-56409: Add an overflow check to xmlwf's output path join.
* CVE-2026-56410: Add an overflow check to xmlwf's resolveSystemId().
* CVE-2026-56411: Protect notation list allocation from integer overflow.
* CVE-2026-56412: Guard XML_TOK_DATA_CHARS handler calls in
doCdataSection() against reentrancy.
* CVE-2026-76957: Protect custom encoding callbacks from reentering
the parser.
* CVE-2026-72522: Fix an out-of-bounds read and resulting infinite
loop in the *_toUtf16 functions.
.
expat (2.5.0-1+deb12u2) bookworm; urgency=medium
.
[ Tomas Korbar <tkorbar@redhat.com> ]
* Backport security fix for CVE-2023-52425: denial of service with really
big tokens.
* Backport security fix for CVE-2024-50602: crash within the
XML_ResumeParser() function because XML_StopParser can stop/suspend an
unstarted parser.
* Backport security fix for CVE-2024-8176: long linear chains of entities
crash with stack overflow.
.
[ Laszlo Boszormenyi (GCS) ]
* Update libexpat1 symbols.
Checksums-Sha1:
309a1e852aeabb41f85d9ba34c27e045cd6f6d1b 1427 expat_2.5.0-1+deb12u3.dsc
6ba0f06de7e3d2b72dd081a8a9f304dde5f8f5ea 50900 expat_2.5.0-1+deb12u3.debian.tar.xz
Checksums-Sha256:
67388db2780dbb8f10cd2d5ace402b655272649dc345825fdc50612007af78d9 1427 expat_2.5.0-1+deb12u3.dsc
1d3fe684581e73766f03c6486dc5e0c068b915da4ae8e778e820495cd9ae44b7 50900 expat_2.5.0-1+deb12u3.debian.tar.xz
Files:
a0a623dd891a8da97f1e04006de1bc44 1427 text optional expat_2.5.0-1+deb12u3.dsc
c0a0b4b47e6785562a5b31564bca06d9 50900 text optional expat_2.5.0-1+deb12u3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCapXl/wAKCRDoRGtKyMdy
YRWCAP9qvVqjKC0PTZPS7n2IUfWwX+B+KYgosoZzEgQbmCLeywEAyA9iYCt2B5hY
kS4Oy/CCLwPdiTIzedkecLEEhaRQ7AA=
=yn8R
-----END PGP SIGNATURE-----
