{"id":"CLSA-2026-1791254668","summary":"Fix CVE(s): CVE-2026-66046, CVE-2026-93990","details":"   * SECURITY UPDATE: XML injection via malformed UTF-16 input: a high\n     surrogate not followed by a low surrogate is accepted and consumes\n     the following code unit, hiding markup characters from the parser\n     (libexpat through 2.8.4)\n     - debian/patches/CVE-2026-93990.patch: reject a UTF-16 high\n       surrogate whose second code unit is not a low surrogate by\n       defining IS_INVALID_CHAR (and isInvalid4 for XML_MIN_SIZE) for\n       the little2_/big2_ encodings; also carries upstream's regression\n       test into tests/runtests.c\n     - CVE-2026-93990\n   * SECURITY UPDATE: Denial of service via quadratic complexity in\n     storeAtts(), which scanned elementType-\u003edefaultAtts linearly to\n     determine the CDATA status of every non-normalized attribute\n     (libexpat through 2.8.3)\n     - debian/patches/CVE-2026-66046.patch: store the index of the first\n       default attribute declaration in the per-element hash table and\n       use a hash lookup instead of the linear scan; includes upstream's\n       follow-up for dtdCopy() so that external entity parsers do not\n       read past the hash table entries\n     - CVE-2026-66046","modified":"2026-10-26T09:31:53.718710314Z","published":"2026-10-06T02:44:39Z","upstream":["CVE-2026-66046","CVE-2026-93990"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1791254668.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66046"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93990"}],"affected":[{"package":{"name":"expat","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/expat?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u7+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791254668.json"}},{"package":{"name":"libexpat1","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libexpat1?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u7+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791254668.json"}},{"package":{"name":"libexpat1-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libexpat1-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6-2+deb10u7+tuxcare.els10"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791254668.json"}}],"schema_version":"1.9.0"}