Synopsis:
expat security updateSummary:
An update for expat is now available for openEuler-20.03-LTS-SP4Description:
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial.
Security Fix(es):
In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.(CVE-2026-24515)Topic:
An update for expat is now available for openEuler-20.03-LTS-SP4.
openEuler Security has rated this update as having a security impact of low. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.Severity:
LowAffected Component:
expat
2.2.9-20.oe2003sp42.2.9-20.oe2003sp42.2.9-20.oe2003sp42.2.9-20.oe2003sp42.2.9-20.oe2003sp4Exploitability
AV:LAC:HPR:NUI:NScope
S:UImpact
C:NI:NA:L2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L