ELSA-2026-88248

[2.7.3-63] - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expat_realloc [2.7.3-62] - CVE-2026-77214 expat: expat: Information disclosure via heap buffer over- read in XML_ParseBuffer [2.7.3-61] - CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity in attribute processing [2.7.3-60] - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input [2.7.3-59] - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog [2.7.3-58] - Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers [2.7.3-57] - expat: backport CVE-2026-45186 fix (attribute collision check DoS) [2.7.3-56] - Rebase to 2.7.3 and add VCS tag * Thu Jun 05 2025 [email protected] <[email protected]> - https://issues.redhat.com/browse/RHELMISC-13073 * Fri Mar 28 2025 Tomas Korbar <[email protected]> - Fix behavior change caused by fix for CVE-2024-8176