SUSE-SU-2026:21062-1

Security update for expat

view advisory published 2026-04-07

Security update for expat

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-32778US	medium5.5	0.17% (6th)	—	2026-03-16
libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.
CVE-2026-32777US	medium5.5	0.22% (12th)	—	2026-03-16
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
CVE-2026-32776US	medium5.5	0.17% (6th)	—	2026-03-16
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.

references

External citations — patches, advisories, analysis.

SUSE Bug 1259711self
SUSE Bug 1259726self
SUSE Bug 1259729self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:21062-1self
SUSE CVE CVE-2026-32776 pageself
SUSE CVE CVE-2026-32777 pageself
SUSE CVE CVE-2026-32778 pageself

remediations (9)

Fixedlibexpat1-0:2.7.1-5.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibexpat1-0:2.7.1-5.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibexpat1-0:2.7.1-5.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibexpat1-0:2.7.1-5.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibexpat1-0:2.7.1-5.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibexpat1-0:2.7.1-5.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibexpat1-0:2.7.1-5.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibexpat1-0:2.7.1-5.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibexpat1-0:2.7.1-5.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan