{"id":"CLSA-2026-1786451206","summary":"Fix CVE(s): CVE-2026-56407, CVE-2026-56408, CVE-2026-56409","details":"   * SECURITY UPDATE: Integer overflow in doProlog related to\n     storeEntityValue and entity textLen (libexpat before 2.8.2)\n     - debian/patches/CVE-2026-56407.patch: cap the entity value pool\n       length at INT_MAX before assigning it to the signed\n       ENTITY::textLen in doProlog\n     - CVE-2026-56407\n   * SECURITY UPDATE: Integer overflow in copyString (libexpat before\n     2.8.2)\n     - debian/patches/CVE-2026-56408.patch: reject lengths above\n       SIZE_MAX / sizeof(XML_Char) before sizing the copy, closing the\n       multiplication overflow in wide-character (libexpatw) builds\n     - CVE-2026-56408\n   * SECURITY UPDATE: Integer overflow for the output filename in xmlwf\n     when -d outputDir is used (libexpat before 2.8.2)\n     - debian/patches/CVE-2026-56409.patch: check the output path join\n       for addition and multiplication overflow, and check the malloc\n       result, before writing the joined path\n     - CVE-2026-56409","modified":"2026-10-26T09:31:52.831342916Z","published":"2026-08-11T12:26:59Z","upstream":["CVE-2026-56407","CVE-2026-56408","CVE-2026-56409"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1786451206.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56407"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56408"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56409"}],"affected":[{"package":{"name":"expat","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/expat?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1786451206.json"}},{"package":{"name":"libexpat1","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libexpat1?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1786451206.json"}},{"package":{"name":"libexpat1-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libexpat1-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u7+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1786451206.json"}}],"schema_version":"1.9.0"}