gpp_maybe Security update for expat

SUSE-SLE-Micro-6.1-471

This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). - CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729).

Release Date

Apr 7 2026
References

Bugzilla: 1259711, 1259726, 1259729
CVEs: CVE-2026-32776, CVE-2026-32777, CVE-2026-32778
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.1 aarch64

Packages

libexpat1
XML Parser Toolkit

2.7.1-slfo.1.1_5.1 lock rpm

SUSE Linux Micro 6.1 ppc64le

Packages

libexpat1
XML Parser Toolkit

2.7.1-slfo.1.1_5.1 lock rpm

SUSE Linux Micro 6.1 s390x

Packages

libexpat1
XML Parser Toolkit

2.7.1-slfo.1.1_5.1 lock rpm

SUSE Linux Micro 6.1 x86_64

Packages

libexpat1
XML Parser Toolkit

2.7.1-slfo.1.1_5.1 lock rpm