[Git][security-tracker-team/security-tracker][master] Add new CVEs for expat

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ea7e3d81 by Salvatore Bonaccorso at 2026-06-21T21:17:50+02:00
Add new CVEs for expat

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,11 +1,20 @@
 CVE-2026-56412 (libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataS ...)
-	TODO: check
+	- expat <unfixed>
+	NOTE: https://github.com/libexpat/libexpat/pull/1278
+	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/d19e834794060d18c061d94452c35d725393ea58
 CVE-2026-56411 (xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDe ...)
-	TODO: check
+	- expat <unfixed>
+	NOTE: https://github.com/libexpat/libexpat/pull/1263
+	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/528a4e5017e1bd3b48b689fd0c131df940ae3ea5
 CVE-2026-56410 (xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSyste ...)
-	TODO: check
+	- expat <unfixed>
+	NOTE: https://github.com/libexpat/libexpat/pull/1252
+	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/deeb97f7c88d17a16b0ea2521a13733abc283347
+	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/cee20e91bf14dc7f6d2fc48f0d70d86b2dc3afea
 CVE-2026-56409 (xmlwf in libexpat before 2.8.2 has an integer overflow for the output  ...)
-	TODO: check
+	- expat <unfixed>
+	NOTE: https://github.com/libexpat/libexpat/pull/1259
+	NOTE: Fixed by: https://github.com/libexpat/libexpat/commit/61f7cdda22546c4bee38dd2d3fa3d6e4aa64d33e
 CVE-2026-56408 (libexpat before 2.8.2 has an integer overflow in copyString.)
 	TODO: check
 CVE-2026-56407 (libexpat before 2.8.2 has an integer overflow in doProlog that is rela ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea7e3d8136ef3239c5ce4fb0f7eff6447e1f0ab4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea7e3d8136ef3239c5ce4fb0f7eff6447e1f0ab4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260621/e171a61b/attachment.htm>