SUSE-SU-2026:4623-1: important: Security update for expat
SLE-SECURITY-UPDATES
null at suse.de
Mon Oct 12 12:30:57 UTC 2026
# Security update for expat
Announcement ID: SUSE-SU-2026:4623-1
Release Date: 2026-10-12T07:27:51Z
Rating: important
References:
* bsc#1249584
* bsc#1257144
* bsc#1257496
* bsc#1259711
* bsc#1259726
* bsc#1259729
* bsc#1262263
* bsc#1264713
* bsc#1267631
* bsc#1268572
* bsc#1268573
* bsc#1275115
* bsc#1275594
* bsc#1275732
* bsc#1275859
* bsc#1275860
* bsc#1275915
* bsc#1282347
* bsc#1283493
* bsc#1284334
* jsc#PED-16154
Cross-References:
* CVE-2016-0718
* CVE-2016-9063
* CVE-2022-43680
* CVE-2023-52425
* CVE-2024-8176
* CVE-2025-59375
* CVE-2026-102633
* CVE-2026-24515
* CVE-2026-25210
* CVE-2026-32776
* CVE-2026-32777
* CVE-2026-32778
* CVE-2026-41080
* CVE-2026-45186
* CVE-2026-50219
* CVE-2026-56131
* CVE-2026-56132
* CVE-2026-56403
* CVE-2026-56404
* CVE-2026-56405
* CVE-2026-56406
* CVE-2026-56407
* CVE-2026-56408
* CVE-2026-56409
* CVE-2026-56410
* CVE-2026-56411
* CVE-2026-56412
* CVE-2026-66046
* CVE-2026-72522
* CVE-2026-76641
* CVE-2026-76956
* CVE-2026-76957
* CVE-2026-77214
* CVE-2026-93990
CVSS scores:
* CVE-2016-0718 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2016-0718 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2016-9063 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2016-9063 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2016-9063 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2022-43680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2024-8176 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2024-8176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2024-8176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-59375 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2025-59375 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-59375 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-102633 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-102633 ( NVD ): 8.2
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-24515 ( SUSE ): 6.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-24515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-24515 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-24515 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-25210 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
* CVE-2026-25210 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
* CVE-2026-25210 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-25210 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-32776 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-32777 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-32778 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-41080 ( SUSE ): 2.0
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
* CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
* CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
* CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
* CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
* CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-66046 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-66046 ( NVD ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-72522 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-76641 ( NVD ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
* CVE-2026-77214 ( SUSE ): 8.8
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-77214 ( NVD ): 8.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
* CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-93990 ( NVD ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products:
* openSUSE Leap 15.4
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
* SUSE Linux Enterprise Micro 5.3
* SUSE Linux Enterprise Micro 5.4
* SUSE Linux Enterprise Micro 5.5
* SUSE Linux Enterprise Micro for Rancher 5.3
* SUSE Linux Enterprise Micro for Rancher 5.4
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP4 LTSS
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP5 LTSS
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server 15 SP6 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
An update that solves 34 vulnerabilities and contains one feature can now be
installed.
## Description:
This update for expat fixes the following issues:
* CVE-2025-59375: denial of service (resource consumption) caused by
processing malformed small documents (bsc#1249584).
* CVE-2026-24515: NULL dereference (CWE-476) due to function
XML_ExternalEntityParserCreate() failing to copy the encoding handler data
passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
(bsc#1257144).
* CVE-2026-25210: lack of buffer size check can lead to an integer overflow
(bsc#1257496).
* CVE-2026-32776: NULL pointer dereference when processing empty external
parameter entities inside an entity declaration value (bsc#1259726).
* CVE-2026-32777: denial of service due to infinite loop in DTD content
parsing (bsc#1259711).
* CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an
out-of-memory condition (bsc#1259729).
* CVE-2026-41080: crafted XML document can cause a denial of service
(bsc#1262263).
* CVE-2026-45186: denial of service via moderately sized crafted XML input
(bsc#1264713).
* CVE-2026-50219: lack of handler call depth tracking for calls to XML_*
functions from within handlers in cases of a policy violation (bsc#1267631).
* CVE-2026-56131: lack of handler call depth tracking for calls to
XML_ResumeParser from within handlers in cases of a policy violation
(bsc#1268572).
* CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c
(bsc#1268573).
* CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406,
CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410,
CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities
(bsc#1275115).
* CVE-2026-66046: denial of service vulnerability caused by quadratic
algorithmic complexity in the storeAtts() function (bsc#1275732).
* CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low
surrogates being treated the same as high surrogates during Unicode
processing (bsc#1275594).
* CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to
trigger memory corruption (bsc#1275915).
* CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860).
* CVE-2026-76957: lack of handler call depth tracking with custom encoding
callbacks. Thus, a use- after-free can occur (bsc#1275859).
* CVE-2026-77214: out-of-bounds read due to insufficient checks in
`XML_ParseBuffer()` (bsc#1284334).
* CVE-2026-93990: fails to validate low surrogates following high surrogates
in UTF-16 input (bsc#1282347).
* CVE-2026-102633: Denial of Service via integer overflow in expat_realloc
(bsc#1283493).
Update to 2.8.5 (jsc#PED-16154):
* Bug fixes:
* Fix an OOM-related memory leak on a failed overflow check
* Fix memory alignment for architectures with 128bit pointers
* Mark XML_SetHashSalt deprecated
* CMake: only add /source-charset:utf-8 when /utf-8 is not present
* lib: resolve undefined behavior from overshifting a signed int
* lib: support read-only hash table lookup with non-zero-terminated keys
* lib: use a C99 bool for ENTITY.open
* version info bumped from 13:3:12 to 13:4:12
* fix support for 2+ GiB documents (regression from 2.8.2)
* reject empty version in the XML declaration
* fix printf format for AIX
* CMake|AIX: enable EXPAT_DEV_URANDOM by default
* version info bumped from 13:2:12 to 13:3:12
* Existing API function XML_SetHashSalt is now deprecated
* because of its limitations, and its use should be
* considered a vulnerability. Please either use the new API
* function XML_SetHashSalt16Bytes (with known-high-quality
* entropy input only!) instead, or leave the derivation of
* a 16-bytes hash salt from high quality entropy to Expat's
* internal machinery (by _not_ calling either of the two
* XML_SetHashSalt* functions).
* xmlwf: Fix a memory leak
* WASI: Fix format specifiers for 32bit WASI SDK
* Fix alignment of internal allocations for some non-amd64 architectures (e.g.
sparc32); fixes up on the fix to CVE-2025-59375 (of Expat 2.7.2)
* Fix a class of false positives where input should have been rejected with
error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 (of Expat 2.7.0)
* Prove and regression-proof absence of integer overflow from function
expat_realloc
* Remove "harmless" cast that truncated a size_t to unsigned
* xmlwf: Resolve use of functions XML_GetErrorLineNumber and
XML_GetErrorColumnNumber
* CVE-2025-59375 -- Disallow use of disproportional amounts of dynamic memory
from within an Expat parser
* xmlwf: Fix (internal) help generator
* xmlwf: Mention supported environment variables in
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4623
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4623
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4623
* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-4623
* SUSE Linux Enterprise Micro for Rancher 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-4623
* SUSE Linux Enterprise Micro 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-4623
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4623
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4623
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4623
* SUSE Linux Enterprise Micro for Rancher 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-4623
* SUSE Linux Enterprise Micro 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-4623
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4623
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2026-4623
* SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4623
* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4623
* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4623
## Package List:
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64
x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64
x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* openSUSE Leap 15.4 (x86_64)
* libexpat-devel-32bit-2.8.5-150400.3.40.1
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* openSUSE Leap 15.4 (aarch64_ilp32)
* expat-64bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-64bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-64bit-2.8.5-150400.3.40.1
* libexpat-devel-64bit-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64
x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
* libexpat1-debuginfo-2.8.5-150400.3.40.1
* expat-debuginfo-2.8.5-150400.3.40.1
* expat-2.8.5-150400.3.40.1
* libexpat1-2.8.5-150400.3.40.1
* expat-debugsource-2.8.5-150400.3.40.1
* libexpat-devel-2.8.5-150400.3.40.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64)
* expat-32bit-debuginfo-2.8.5-150400.3.40.1
* libexpat1-32bit-2.8.5-150400.3.40.1
* libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1
## References:
* https://www.suse.com/security/cve/CVE-2016-0718.html
* https://www.suse.com/security/cve/CVE-2016-9063.html
* https://www.suse.com/security/cve/CVE-2022-43680.html
* https://www.suse.com/security/cve/CVE-2023-52425.html
* https://www.suse.com/security/cve/CVE-2024-8176.html
* https://www.suse.com/security/cve/CVE-2025-59375.html
* https://www.suse.com/security/cve/CVE-2026-102633.html
* https://www.suse.com/security/cve/CVE-2026-24515.html
* https://www.suse.com/security/cve/CVE-2026-25210.html
* https://www.suse.com/security/cve/CVE-2026-32776.html
* https://www.suse.com/security/cve/CVE-2026-32777.html
* https://www.suse.com/security/cve/CVE-2026-32778.html
* https://www.suse.com/security/cve/CVE-2026-41080.html
* https://www.suse.com/security/cve/CVE-2026-45186.html
* https://www.suse.com/security/cve/CVE-2026-50219.html
* https://www.suse.com/security/cve/CVE-2026-56131.html
* https://www.suse.com/security/cve/CVE-2026-56132.html
* https://www.suse.com/security/cve/CVE-2026-56403.html
* https://www.suse.com/security/cve/CVE-2026-56404.html
* https://www.suse.com/security/cve/CVE-2026-56405.html
* https://www.suse.com/security/cve/CVE-2026-56406.html
* https://www.suse.com/security/cve/CVE-2026-56407.html
* https://www.suse.com/security/cve/CVE-2026-56408.html
* https://www.suse.com/security/cve/CVE-2026-56409.html
* https://www.suse.com/security/cve/CVE-2026-56410.html
* https://www.suse.com/security/cve/CVE-2026-56411.html
* https://www.suse.com/security/cve/CVE-2026-56412.html
* https://www.suse.com/security/cve/CVE-2026-66046.html
* https://www.suse.com/security/cve/CVE-2026-72522.html
* https://www.suse.com/security/cve/CVE-2026-76641.html
* https://www.suse.com/security/cve/CVE-2026-76956.html
* https://www.suse.com/security/cve/CVE-2026-76957.html
* https://www.suse.com/security/cve/CVE-2026-77214.html
* https://www.suse.com/security/cve/CVE-2026-93990.html
* https://bugzilla.suse.com/show_bug.cgi?id=1249584
* https://bugzilla.suse.com/show_bug.cgi?id=1257144
* https://bugzilla.suse.com/show_bug.cgi?id=1257496
* https://bugzilla.suse.com/show_bug.cgi?id=1259711
* https://bugzilla.suse.com/show_bug.cgi?id=1259726
* https://bugzilla.suse.com/show_bug.cgi?id=1259729
* https://bugzilla.suse.com/show_bug.cgi?id=1262263
* https://bugzilla.suse.com/show_bug.cgi?id=1264713
* https://bugzilla.suse.com/show_bug.cgi?id=1267631
* https://bugzilla.suse.com/show_bug.cgi?id=1268572
* https://bugzilla.suse.com/show_bug.cgi?id=1268573
* https://bugzilla.suse.com/show_bug.cgi?id=1275115
* https://bugzilla.suse.com/show_bug.cgi?id=1275594
* https://bugzilla.suse.com/show_bug.cgi?id=1275732
* https://bugzilla.suse.com/show_bug.cgi?id=1275859
* https://bugzilla.suse.com/show_bug.cgi?id=1275860
* https://bugzilla.suse.com/show_bug.cgi?id=1275915
* https://bugzilla.suse.com/show_bug.cgi?id=1282347
* https://bugzilla.suse.com/show_bug.cgi?id=1283493
* https://bugzilla.suse.com/show_bug.cgi?id=1284334
* https://jira.suse.com/browse/PED-16154
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20261012/e305d8d0/attachment.htm>
More information about the sle-security-updates
mailing list