{"schemaVersion":3,"id":"SUSE-SU-2026:23894-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for expat\n\nThis update for expat fixes the following issues:\n\n- CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263).\n- CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a\n  denial of service via moderately sized crafted XML input (bsc#1264713).\n- CVE-2026-50219: libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse,\n  XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation (bsc#1267631).\n- CVE-2026-56131: libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within\n  handlers in cases of a policy violation (bsc#1268572).\n- CVE-2026-56132: mishandled memory reallocation during array scaffolding in doProlog can cause heap-based buffer\n  overflows (bsc#1268573).\n- CVE-2026-56403: integer overflow in the storeAtts function can cause memory corruption and potential arbitrary code\n  execution (bsc#1275096).\n- CVE-2026-56404: integer overflow in the addBinding function can cause undersized memory allocations, memory\n  corruption, and application crashes (bsc#1275096).\n- CVE-2026-56405: integer overflow in the getAttributeId function can cause heap memory corruption and arbitrary\n  code execution (bsc#1275096).\n- CVE-2026-56406: missing bounds validation in XML_ParseBuffer can cause integer overflows, memory corruption, and\n  application crashes (bsc#1275096).\n- CVE-2026-56407: integer overflow in doProlog related to entity text length can cause memory corruption and denial\n  of service (bsc#1275096).\n- CVE-2026-56408: integer overflow in the copyString function can cause heap memory corruption and application crashes\n  (bsc#1275096).\n- CVE-2026-56409: integer overflow in the xmlwf utility output filename handling can allow path buffer corruption and\n  arbitrary file write conditions (bsc#1275096).\n- CVE-2026-56410: integer overflow in resolveSystemId within the xmlwf utility can cause memory corruption, information\n  disclosure, and potential code execution (bsc#1275096).\n- CVE-2026-56411: integer overflow in endDoctypeDecl via NOTATION declarations in xmlwf can cause memory corruption and\n  denial of service (bsc#1275096).\n- CVE-2026-56412: incomplete handler call depth tracking in doCdataSection can cause use-after-free\n  conditions and arbitrary code execution (bsc#1275096).\n- CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the\n  storeAtts() function in xmlparse.c (bsc#1275732).\n- CVE-2026-72522: libexpat: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same\n  as high surrogates during Unicode processing (bsc#1275594).\n- CVE-2026-76641: Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger\n  memory corruption (bsc#1275915).\n- CVE-2026-76956: In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to\n  insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via\n  crafted X (bsc#1275860).\n- CVE-2026-76957: libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. (bsc#1275859).\n\nChanges for expat:\n\n- Updated to version 2.8.4","dates":{"published":"2026-09-24T07:07:13.000Z","modified":"2026-09-30T18:23:11.313Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"expat&distro=SUSE Linux Micro 6.2","name":"expat","label":"expat&distro=SUSE Linux Micro 6.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/expat&distro=SUSE Linux Micro 6.2","purlType":"rpm","versions":[{"text":"< 2.8.4-160000.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.4-160000.1.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623894-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-202623894-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1262263","label":"bugzilla.suse.com/1262263","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1264713","label":"bugzilla.suse.com/1264713","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267631","label":"bugzilla.suse.com/1267631","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268572","label":"bugzilla.suse.com/1268572","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268573","label":"bugzilla.suse.com/1268573","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275096","label":"bugzilla.suse.com/1275096","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275594","label":"bugzilla.suse.com/1275594","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275732","label":"bugzilla.suse.com/1275732","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275859","label":"bugzilla.suse.com/1275859","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275860","label":"bugzilla.suse.com/1275860","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275915","label":"bugzilla.suse.com/1275915","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41080","label":"www.suse.com/security/cve/CVE-2026-41080","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45186","label":"www.suse.com/security/cve/CVE-2026-45186","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50219","label":"www.suse.com/security/cve/CVE-2026-50219","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56131","label":"www.suse.com/security/cve/CVE-2026-56131","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56132","label":"www.suse.com/security/cve/CVE-2026-56132","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56403","label":"www.suse.com/security/cve/CVE-2026-56403","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56404","label":"www.suse.com/security/cve/CVE-2026-56404","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56405","label":"www.suse.com/security/cve/CVE-2026-56405","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56406","label":"www.suse.com/security/cve/CVE-2026-56406","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56407","label":"www.suse.com/security/cve/CVE-2026-56407","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56408","label":"www.suse.com/security/cve/CVE-2026-56408","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56409","label":"www.suse.com/security/cve/CVE-2026-56409","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56410","label":"www.suse.com/security/cve/CVE-2026-56410","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56411","label":"www.suse.com/security/cve/CVE-2026-56411","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56412","label":"www.suse.com/security/cve/CVE-2026-56412","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-66046","label":"www.suse.com/security/cve/CVE-2026-66046","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72522","label":"www.suse.com/security/cve/CVE-2026-72522","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76641","label":"www.suse.com/security/cve/CVE-2026-76641","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76956","label":"www.suse.com/security/cve/CVE-2026-76956","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76957","label":"www.suse.com/security/cve/CVE-2026-76957","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2026-41080","CVE-2026-45186","CVE-2026-50219","CVE-2026-56131","CVE-2026-56132","CVE-2026-56403","CVE-2026-56404","CVE-2026-56405","CVE-2026-56406","CVE-2026-56407","CVE-2026-56408","CVE-2026-56409","CVE-2026-56410","CVE-2026-56411","CVE-2026-56412","CVE-2026-66046","CVE-2026-72522","CVE-2026-76641","CVE-2026-76956","CVE-2026-76957"],"downstream":[],"duplicates":[],"related":["CVE-2026-41080","CVE-2026-45186","CVE-2026-50219","CVE-2026-56131","CVE-2026-56132","CVE-2026-56403","CVE-2026-56404","CVE-2026-56405","CVE-2026-56406","CVE-2026-56407","CVE-2026-56408","CVE-2026-56409","CVE-2026-56410","CVE-2026-56411","CVE-2026-56412","CVE-2026-66046","CVE-2026-72522","CVE-2026-76641","CVE-2026-76956","CVE-2026-76957"]},"timeline":[{"kind":"published","date":"2026-09-24T07:07:13.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-30T18:23:11.313Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T07:45:30.031Z","stale":false,"partial":false}}