openEuler-SA-2026-1274

Synopsis:

expat security updateSummary:

An update for expat is now available for openEuler-24.03-LTS-SP3Description:

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial.

Security Fix(es):

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.(CVE-2026-24515)Topic:

An update for expat is now available for openEuler-24.03-LTS-SP3.

openEuler Security has rated this update as having a security impact of low. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.Severity:

LowAffected Component:

expat