SUSE-SU-2026:0646-1

Опубликовано: 25 фев. 2026

Источник: suse-cvrf

Описание

Security update for expat

This update for expat fixes the following issues:

CVE-2026-24515: Fixed a null dereference in XML_ExternalEntityParserCreate. (bsc#1257144)
CVE-2026-25210: Fixed an integer overflow in doContent. (bsc#1257496)

Список пакетов

Container bci/bci-base-fips:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/bci-init:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/bci-sle15-kernel-module-devel:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/gcc:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/golang:1.25

libexpat1-2.7.1-150700.3.9.2

Container bci/golang:1.25-openssl

libexpat1-2.7.1-150700.3.9.2

Container bci/golang:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/node:22

libexpat1-2.7.1-150700.3.9.2

Container bci/openjdk-devel:17

libexpat1-2.7.1-150700.3.9.2

Container bci/openjdk-devel:21

libexpat1-2.7.1-150700.3.9.2

Container bci/openjdk-devel:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/openjdk:17

libexpat1-2.7.1-150700.3.9.2

Container bci/openjdk:21

libexpat1-2.7.1-150700.3.9.2

Container bci/openjdk:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/php-apache:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/python:3

libexpat1-2.7.1-150700.3.9.2

Container bci/python:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/ruby:2

libexpat1-2.7.1-150700.3.9.2

Container bci/ruby:latest

libexpat1-2.7.1-150700.3.9.2

Container bci/spack:latest

libexpat1-2.7.1-150700.3.9.2

Container private-registry/1.2/harbor-portal:latest

libexpat1-2.7.1-150700.3.9.2

Container private-registry/1.2/harbor-trivy-adapter:latest

libexpat1-2.7.1-150700.3.9.2

Container private-registry/harbor-portal:latest

libexpat1-2.7.1-150700.3.9.2

Container private-registry/harbor-trivy-adapter:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/389-ds:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/git:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/kea:2.6

libexpat1-2.7.1-150700.3.9.2

Container suse/kiosk/firefox-esr:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/kiosk/pulseaudio:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/kiosk/xorg-client:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/kiosk/xorg:latest

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Container suse/mariadb:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/multi-linux-manager/5.1/x86_64/proxy-squid:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/multi-linux-manager/5.1/x86_64/proxy-ssh:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/multi-linux-manager/5.1/x86_64/proxy-tftpd:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/multi-linux-manager/5.1/x86_64/server-saline:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/multi-linux-manager/5.1/x86_64/server:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/nginx:1.21

libexpat1-2.7.1-150700.3.9.2

Container suse/pcp:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/postgres:16.14

libexpat1-2.7.1-150700.3.9.2

Container suse/postgres:17.10

libexpat1-2.7.1-150700.3.9.2

Container suse/postgres:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/registry:2.8

libexpat1-2.7.1-150700.3.9.2

Container suse/samba-client:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/samba-server:latest

libexpat1-2.7.1-150700.3.9.2

Container suse/samba-toolbox:latest

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:550-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:550.163.01-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:570-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:570.195.03-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:570.211.01-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:575-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:575.57.08-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:580-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:580.105.08-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:580.126.09-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:580.126.16-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:580.126.20-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:580.82.07-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:580.95.05-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:590-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:590.48.01-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:595-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:595.45.04-sles15.7

libexpat1-2.7.1-150700.3.9.2

Container third-party/nvidia/driver:595.58.03-sles15.7

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-Azure-3P

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-Azure-Basic

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-Azure-Standard

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-BYOS-Azure

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-BYOS-EC2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-BYOS-GCE

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-CHOST-BYOS-Aliyun

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-CHOST-BYOS-Azure

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-CHOST-BYOS-EC2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-CHOST-BYOS-GCE

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-CHOST-BYOS-GDC

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-EC2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-EC2-ECS-HVM

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-GCE

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-GCE-3P

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-HPC-Azure

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-HPC-BYOS-Azure

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-HPC-BYOS-EC2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-HPC-BYOS-GCE

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-Hardened-BYOS-Azure

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-Hardened-BYOS-EC2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-Hardened-BYOS-GCE

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-Azure

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-Azure-3P

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-BYOS-Azure

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-BYOS-EC2

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-BYOS-GCE

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-EC2

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-GCE

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-GCE-3P

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-Hardened-Azure

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAP-Hardened-GCE

expat-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAPCAL-Azure

expat-2.7.1-150700.3.9.2

libexpat-devel-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAPCAL-EC2

expat-2.7.1-150700.3.9.2

libexpat-devel-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image SLES15-SP7-SAPCAL-GCE

expat-2.7.1-150700.3.9.2

libexpat-devel-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

Image pr_15_7

libexpat1-2.7.1-150700.3.9.2

Image pr_15_7_1_0

libexpat1-2.7.1-150700.3.9.2

Image proxy-httpd-image

libexpat1-2.7.1-150700.3.9.2

Image proxy-salt-broker-image

libexpat1-2.7.1-150700.3.9.2

Image proxy-squid-image

libexpat1-2.7.1-150700.3.9.2

Image proxy-ssh-image

libexpat1-2.7.1-150700.3.9.2

Image proxy-tftpd-image

libexpat1-2.7.1-150700.3.9.2

Image server-database-migration-image

libexpat1-2.7.1-150700.3.9.2

Image server-hub-xmlrpc-api-image

libexpat1-2.7.1-150700.3.9.2

Image server-image

libexpat1-2.7.1-150700.3.9.2

Image server-image-sles15sp7

libexpat1-2.7.1-150700.3.9.2

Image server-saline-image

libexpat1-2.7.1-150700.3.9.2

SUSE Linux Enterprise Module for Basesystem 15 SP7

expat-2.7.1-150700.3.9.2

libexpat-devel-2.7.1-150700.3.9.2

libexpat1-2.7.1-150700.3.9.2

libexpat1-32bit-2.7.1-150700.3.9.2

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20260646-1/
Link for SUSE-SU-2026:0646-1
https://lists.suse.com/pipermail/sle-security-updates/2026-February/024401.html
E-Mail link for SUSE-SU-2026:0646-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1257144
SUSE Bug 1257144
https://bugzilla.suse.com/1257496
SUSE Bug 1257496
https://www.suse.com/security/cve/CVE-2026-24515/
SUSE CVE CVE-2026-24515 page
https://www.suse.com/security/cve/CVE-2026-25210/
SUSE CVE CVE-2026-25210 page

Описание

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

Затронутые продукты

Container bci/bci-base-fips:latest:libexpat1-2.7.1-150700.3.9.2

Container bci/bci-init:latest:libexpat1-2.7.1-150700.3.9.2

Container bci/bci-sle15-kernel-module-devel:latest:libexpat1-2.7.1-150700.3.9.2

Container bci/gcc:latest:libexpat1-2.7.1-150700.3.9.2

Ссылки

https://www.suse.com/security/cve/CVE-2026-24515.html
CVE-2026-24515
https://bugzilla.suse.com/1257144
SUSE Bug 1257144

Описание

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

Затронутые продукты

Container bci/bci-base-fips:latest:libexpat1-2.7.1-150700.3.9.2

Container bci/bci-init:latest:libexpat1-2.7.1-150700.3.9.2

Container bci/bci-sle15-kernel-module-devel:latest:libexpat1-2.7.1-150700.3.9.2

Container bci/gcc:latest:libexpat1-2.7.1-150700.3.9.2

Ссылки

https://www.suse.com/security/cve/CVE-2026-25210.html
CVE-2026-25210
https://bugzilla.suse.com/1257496
SUSE Bug 1257496