Linuxsecurity Fedora 43 and 44 mingw-expat Denial of Service Vulnerability Update
Article Content
- •CVE-2026-72522 affects mingw-expat in Fedora 43 and 44.
- •Denial of Service vulnerability due to incorrect Unicode handling.
- •Users must upgrade to expat-2.8.3 to mitigate risks.
Fedora has released updates for mingw-expat to address a Denial of Service vulnerability identified as CVE-2026-72522. This vulnerability arises from improper handling of Unicode surrogate pairs, potentially allowing attackers to disrupt services. The affected versions are expat-2.8.2 and earlier, with the patched version being expat-2.8.3. Users are advised to upgrade to the latest version to mitigate the risk. The vulnerability was published on August 10, 2026, and is applicable to all Fedora systems utilizing mingw-expat. The updates can be installed using the 'dnf' update program. The issue was reported under Bug #2513993, indicating a broad scope of impact across Fedora installations. Current status shows that the vulnerability has been patched, but administrators are urged to apply the updates promptly.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CVE-2026-72522 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…