[CLSA-2026:1779358538] expat: Fix of CVE-2026-45186
Type:
security
Severity:
Important
Release date:
2026-05-21 11:40:35 UTC
Description:
- CVE-2026-45186: fix quadratic runtime in attribute collision detection by using a hash table for default attribute names instead of an O(n^2) loop
Updated packages:
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els2.i686.rpm
    sha:c44e7d3019aa1368829800d5693b671173bbd065fce20b9c63ea2a98027c075a
  • expat-2.1.0-15.0.7.el7_9.tuxcare.els2.x86_64.rpm
    sha:fe48505f56b3af3ba40872bed60042a6a38923d16d942c84a8c14a50751d3ca2
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els2.i686.rpm
    sha:9a7448e31c0b9221a6cbb7ecbe125767a7ef5b20dfe33afca53322edb57ea191
  • expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els2.x86_64.rpm
    sha:228745b43def547628934b5e7eed1ebc503ae045d1771fdad305fac88eebd497
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els2.i686.rpm
    sha:4d22dd552c8d229d115c91f8cf9de9287f119ce8bd78a665ab460da31f29bd8f
  • expat-static-2.1.0-15.0.7.el7_9.tuxcare.els2.x86_64.rpm
    sha:1c66c0ed97b3f387d078eced9b3380e188af5823f43a54c8428ad92d31baf22f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.