Описание
Security update for expat
This update for expat fixes the following issues:
- CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726).
- CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711).
- CVE-2026-32778: NULL pointer dereference in
setContexton retry after an out-of-memory condition (bsc#1259729).
Список пакетов
Image SLES12-SP5-Azure-BYOS
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-Azure-HPC-BYOS
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-Azure-HPC-On-Demand
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-Azure-SAP-BYOS
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-Azure-SAP-On-Demand
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-Azure-Standard-On-Demand
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-EC2-BYOS
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-EC2-ECS-On-Demand
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-EC2-On-Demand
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-EC2-SAP-BYOS
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-EC2-SAP-On-Demand
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-GCE-BYOS
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-GCE-On-Demand
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-GCE-SAP-BYOS
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
Image SLES12-SP5-GCE-SAP-On-Demand
expat-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
SUSE Linux Enterprise Server 12 SP5-LTSS
expat-2.7.1-21.52.1
libexpat-devel-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
libexpat1-32bit-2.7.1-21.52.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
expat-2.7.1-21.52.1
libexpat-devel-2.7.1-21.52.1
libexpat1-2.7.1-21.52.1
libexpat1-32bit-2.7.1-21.52.1
Ссылки
- Link for SUSE-SU-2026:1159-1
- E-Mail link for SUSE-SU-2026:1159-1
- SUSE Security Ratings
- SUSE Bug 1259711
- SUSE Bug 1259726
- SUSE Bug 1259729
- SUSE CVE CVE-2026-32776 page
- SUSE CVE CVE-2026-32777 page
- SUSE CVE CVE-2026-32778 page
Описание
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.
Затронутые продукты
Image SLES12-SP5-Azure-BYOS:expat-2.7.1-21.52.1
Image SLES12-SP5-Azure-BYOS:libexpat1-2.7.1-21.52.1
Image SLES12-SP5-Azure-HPC-BYOS:expat-2.7.1-21.52.1
Image SLES12-SP5-Azure-HPC-BYOS:libexpat1-2.7.1-21.52.1
Ссылки
- CVE-2026-32776
- SUSE Bug 1259724
Описание
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
Затронутые продукты
Image SLES12-SP5-Azure-BYOS:expat-2.7.1-21.52.1
Image SLES12-SP5-Azure-BYOS:libexpat1-2.7.1-21.52.1
Image SLES12-SP5-Azure-HPC-BYOS:expat-2.7.1-21.52.1
Image SLES12-SP5-Azure-HPC-BYOS:libexpat1-2.7.1-21.52.1
Ссылки
- CVE-2026-32777
- SUSE Bug 1259710
Описание
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.
Затронутые продукты
Image SLES12-SP5-Azure-BYOS:expat-2.7.1-21.52.1
Image SLES12-SP5-Azure-BYOS:libexpat1-2.7.1-21.52.1
Image SLES12-SP5-Azure-HPC-BYOS:expat-2.7.1-21.52.1
Image SLES12-SP5-Azure-HPC-BYOS:libexpat1-2.7.1-21.52.1
Ссылки
- CVE-2026-32778
- SUSE Bug 1259725