Debian LTS Expat Security Update DLA-4765

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

Calling certain libexpat functions from within a handler could cause use-after-free. CVE-2026-56403, CVE-2026-56404, CVE-2026-56405, CVE-2026-56406, CVE-2026-56407, CVE-2026-56408, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411 Integer overflow in several functions. CVE-2026-56412 A missing reentrancy guard around CDATA section handler calls could cause use-after-free. CVE-2026-72522 An out-of-bounds read in expat's internal UTF-16 conversion functions could cause an infinite loop when processing crafted input, resulting in a denial of service. For Debian 12 bookworm, these problems have been fixed in version 2.5.0-1+deb12u3. We recommend that you upgrade your expat packages. For the detailed security status of expat please refer to its security tracker page at: Further information Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be

Calling certain libexpat functions from within a handler could cause use-after-free. CVE-2026-56403, CVE-2026-56404, CVE-2026-56405, CVE-2026-56406, CVE-2026-56407, CVE-2026-56408, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411 Integer overflow in several functions. CVE-2026-56412 A missing reentrancy guard around CDATA section handler calls could cause use-after-free. CVE-2026-72522 An out-of-bounds read in expat's internal UTF-16 conversion functions could cause an infinite loop when processing crafted input, resulting in a denial of service. For Debian 12 bookworm, these problems have been fixed in version 2.5.0-1+deb12u3. We recommend that you upgrade your expat packages. For the detailed security status of expat please refer to its security tracker page at: Further information Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases