gpp_maybe Security update for expat

SUSE-SL-Micro-6.2-466

This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). - CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729).

Release Date

Mar 30 2026
References

Bugzilla: 1259711, 1259726, 1259729
CVEs: CVE-2026-32776, CVE-2026-32777, CVE-2026-32778
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.2 s390x

Packages

libexpat1
XML Parser Toolkit

2.7.1-160000.5.1 lock rpm

SUSE Linux Micro 6.2 ppc64le

Packages

libexpat1
XML Parser Toolkit

2.7.1-160000.5.1 lock rpm

SUSE Linux Micro 6.2 aarch64

Packages

libexpat1
XML Parser Toolkit

2.7.1-160000.5.1 lock rpm

SUSE Linux Micro 6.2 x86_64

Packages

libexpat1
XML Parser Toolkit

2.7.1-160000.5.1 lock rpm