[CLSA-2026:1780592184] expat: Fix of CVE-2026-41080
Type:
security
Severity:
Low
Release date:
2026-06-04 16:56:41 UTC
Description:
- CVE-2026-41080: fix hash-flooding DoS from insufficient salt entropy by extracting a full 16-byte hash salt and adding the XML_SetHashSalt16Bytes API
CVEs fixed:
Updated packages:
  • expat-2.5.0-1.el8.tuxcare.els5.i686.rpm
    sha:64c6dc8b6b22ccf4f5c2f7f5031b6e5741233c1b5aca8c78c706c615de2798ef
  • expat-2.5.0-1.el8.tuxcare.els5.x86_64.rpm
    sha:18b2b4990589a9d011a498f093a5d6c5446b8022d2b6e7068ee54caa2aedbe6a
  • expat-devel-2.5.0-1.el8.tuxcare.els5.i686.rpm
    sha:1f92143b0ff3473401cd9490e3e46a07dd3ab83de92d739c9ef1bbbfe3e31712
  • expat-devel-2.5.0-1.el8.tuxcare.els5.x86_64.rpm
    sha:2e4b3ee9f667f57c53bd5df41706d9d0183a83fe59419975e3fe7ce68c954ebd
  • expat-static-2.5.0-1.el8.tuxcare.els5.x86_64.rpm
    sha:d3e62897b515169106beb2a7e4f7eba76a37516e27c6628e74ced60e1b9574e5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.