ELSA-2026-64810-0

Описание

[2.7.3-59]

• Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog

[2.7.3-58]

• Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers

[2.7.3-57]

• expat: backport CVE-2026-45186 fix (attribute collision check DoS)

[2.7.3-56]

• Rebase to 2.7.3 and add VCS tag

• Thu Jun 05 2025 psklenar@redhat.com psklenar@redhat.com

• https://issues.redhat.com/browse/RHELMISC-13073

• Fri Mar 28 2025 Tomas Korbar tkorbar@redhat.com

• Fix behavior change caused by fix for CVE-2024-8176

• Fri Mar 14 2025 Tomas Korbar tkorbar@redhat.com

• Fix CVE-2024-8176

• Thu Nov 07 2024 Tomas Korbar tkorbar@redhat.com

• Rebase to 2.6.4

• Tue Oct 29 2024 Troy Dawson tdawson@redhat.com

• Bump release for October 2024 mass rebuild:

• Wed Jul 03 2024 Tomas Korbar tkorbar@redhat.com

• Rebase to 2.6.2