[<prev] [next>] [day] [month] [year] [list]
Message-ID: <347725ee-629f-4b1b-b040-e8998e249044@pipping.org>
Date: Sat, 31 Jan 2026 14:45:44 +0100
From: Sebastian Pipping <sebastian@...ping.org>
To: oss-security@...ts.openwall.com
Subject: libexpat 2.7.4 fixes CVE-2026-24515 and CVE-2026-25210
Hello oss-security,
just a quick note that libexpat 2.7.4 (or "Expat 2.7.4") released
today is fixing CVE-2026-24515 (NULL pointer de-reference, CWE-476)
and CVE-2026-25210 (integer overflow, CWE-190).
Some key links are:
- The change log of release 2.7.4
https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes
- The fixing pull requests
- https://github.com/libexpat/libexpat/pull/1131
- https://github.com/libexpat/libexpat/pull/1075
- The official CVE metadata
- https://nvd.nist.gov/vuln/detail/CVE-2026-24515
- https://nvd.nist.gov/vuln/detail/CVE-2026-25210
Best
Sebastian
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
