Debian Patches
Status for expat/2.5.0-1+deb12u3
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| fix-expat-noconfig.patch | libexpat.so.X.Y.Z is installed in /lib/${DEB_HOST_MULTIARCH} instead of /usr/lib/${DEB_HOST_MULTIARCH}, thus the path of the shared library is not relative to the location of this cmake file (Closes: #995907) |
Andrius Merkys <merkys@debian.org> | not-needed | 2026-08-30 | ||
| fix-expat-cmake.patch | fix-expat-cmake | "Laszlo Boszormenyi (GCS)" <gcs@debian.org> | no | 2026-08-30 | ||
| CVE-2024-45490.patch | [PATCH 1/3] lib: Reject negative len for XML_ParseBuffer Reported by TaiYou |
Sebastian Pipping <sebastian@pipping.org> | no | 2024-08-19 | ||
| CVE-2024-45491.patch | lib: Detect integer overflow in dtdCopy Reported by TaiYou |
Sebastian Pipping <sebastian@pipping.org> | no | 2024-08-19 | ||
| CVE-2024-45492.patch | lib: Detect integer overflow in function nextScaffoldPart Reported by TaiYou |
Sebastian Pipping <sebastian@pipping.org> | no | 2024-08-19 | ||
| expat-2.5.0-CVE-2023-52425.patch | expat-2.5.0-CVE-2023-52425 commit 678a2f7efcaaa977886e055613f2332615aef82c Fix CVE-2023-52425 |
Tomas Korbar <tkorbar@redhat.com> | no | 2024-02-13 | ||
| expat-2.5.0-CVE-2024-50602.patch | expat-2.5.0-CVE-2024-50602 commit 38905b99bb78a6a691ed8358f30030116783656c Fix CVE-2024-50602 See https://github.com/libexpat/libexpat/pull/915 |
Tomas Korbar <tkorbar@redhat.com> | no | 2024-11-07 | ||
| expat-2.5.0-CVE-2024-8176.patch | expat-2.5.0-CVE-2024-8176 commit c0de4903900004dd3ca91f246e5f6489a49a132b Fix CVE-2024-8176 |
Tomas Korbar <tkorbar@redhat.com> | no | 2025-03-24 | ||
| CVE-2026-50219-1.patch | lib: Introduce handler call depth tracking | Sebastian Pipping <sebastian@pipping.org> | no | backport, https://github.com/libexpat/libexpat/pull/1246/commits | 2026-05-26 | |
| CVE-2026-50219-2.patch | lib: Prepare m_notStandaloneHandler, m_externalEntityRefHandler, m_unknownEncodingHandler calls for upcoming wrapping | Sebastian Pipping <sebastian@pipping.org> | no | backport, https://github.com/libexpat/libexpat/pull/1246/commits | 2026-05-26 | |
| CVE-2026-50219-3.patch | lib: Register m_*Handler with handler call depth tracking - m_attlistDeclHandler - m_characterDataHandler - m_commentHandler - m_defaultHandler - m_elementDeclHandler - m_endCdataSectionHandler - m_endDoctypeDeclHandler - m_endElementHandler - m_endNamespaceDeclHandler - m_entityDeclHandler - m_externalEntityRefHandler - m_notationDeclHandler - m_notStandaloneHandler - m_processingInstructionHandler - m_skippedEntityHandler - m_startCdataSectionHandler - m_startDoctypeDeclHandler - m_startElementHandler - m_startNamespaceDeclHandler - m_unknownEncodingHandler - m_unparsedEntityDeclHandler - m_xmlDeclHandler |
Sebastian Pipping <sebastian@pipping.org> | no | backport, https://github.com/libexpat/libexpat/pull/1246/commits | 2026-05-26 | |
| CVE-2026-50219-4.patch | lib: Protect XML_* from being called from a handler - XML_GetBuffer - XML_Parse - XML_ParseBuffer - XML_ParserFree - XML_ParserReset |
Sebastian Pipping <sebastian@pipping.org> | no | backport, https://github.com/libexpat/libexpat/pull/1246/commits | 2026-05-26 | |
| CVE-2026-56131.patch | lib: protect XML_ResumeParser from being called from a handler The handler-reentrancy guards from CVE-2026-50219 cover XML_Parse, XML_ParseBuffer, XML_GetBuffer, XML_ParserFree and XML_ParserReset but not XML_ResumeParser, which drives the parser through callProcessor in the same way. |
netliomax25-code <netliomax25@gmail.com> | no | backport, https://github.com/libexpat/libexpat/pull/1267/commits | 2026-06-06 | |
| CVE-2026-56403-0.patch | lib: split inessential reuse of `n` in `storeAtts` This change is intended to reduce the diff of an upcoming commit. |
Matthew Fernandez <matthew.fernandez@gmail.com> | no | backport, https://github.com/libexpat/libexpat/commit/99256f5fc2885e2176c9c9dd14af8625deab02f2 | 2026-05-19 | |
| CVE-2026-56403-1.patch | lib: Protect function `storeAtts` from signed integer overflow | Sebastian Pipping <sebastian@pipping.org> | no | backport, https://github.com/libexpat/libexpat/commit/12dc6d8d3d65f79471a94d8565f6bf1cf245f648 | 2026-05-20 | |
| CVE-2026-56403-2.patch | xmlwf: Protect function `xcsdup` from signed integer overflow | Sebastian Pipping <sebastian@pipping.org> | no | backport, https://github.com/libexpat/libexpat/commit/147c8f36d6277d5c6011c098370a8362aed47b15 | 2026-05-22 | |
| CVE-2026-56404.patch | lib: protect function addBinding from signed integer overflow | netliomax25-code <netliomax25@gmail.com> | no | upstream, https://github.com/libexpat/libexpat/commit/babfc48090977cbf7be24b2c48f6053dca75c164 | 2026-05-28 | |
| CVE-2026-56405.patch | lib: Protect function getAttributeId from signed integer overflow | netliomax25-code <netliomax25@gmail.com> | no | upstream, https://github.com/libexpat/libexpat/commit/2c6c42d33689f6b266a5267b639e03cde17e53c0 | 2026-05-29 | |
| CVE-2026-56406-1.patch | lib: Copy overflow check from `XML_Parse` to `XML_ParseBuffer` | Sebastian Pipping <sebastian@pipping.org> | no | upstream, https://github.com/libexpat/libexpat/commit/99d8454fdf900a6d00c2a52748e6c0eeb507574d | 2026-05-31 | |
| CVE-2026-56406-2.patch | lib: Make internal `m_position` use `uint64_t` to support >4 GiB documents | Sebastian Pipping <sebastian@pipping.org> | no | upstream, https://github.com/libexpat/libexpat/pull/1300 | 2026-08-06 | |
| CVE-2026-56406-3.patch | lib: Make internal `m_parseEndByteIndex` use `uint64_t` to support >2 GiB documents Fixes a regression from Expat 2.8.2. |
Evgeny Kotkov <kotkov@apache.org> | no | upstream, https://github.com/libexpat/libexpat/pull/1300 | 2026-08-06 | |
| CVE-2026-56407.patch | cap entity textLen against signed integer overflow | netliomax25-code <netliomax25@gmail.com> | no | upstream, https://github.com/libexpat/libexpat/commit/30c2fc179ce5d2b1b1bae30bbe0dfddeac894e13 | 2026-06-02 | |
| CVE-2026-56408.patch | lib: Waterproof `copyString` from integer overflow | Sebastian Pipping <sebastian@pipping.org> | no | upstream, https://github.com/libexpat/libexpat/commit/16e2efd867ea8567ffa012210b52ef5918e20817 | 2026-04-23 | |
| CVE-2026-56409.patch | xmlwf: protect output path join from integer overflow | netliomax25-code <netliomax25@gmail.com> | no | backport, https://github.com/libexpat/libexpat/commit/61f7cdda22546c4bee38dd2d3fa3d6e4aa64d33e | 2026-06-01 | |
| CVE-2026-56410-1.patch | xmlwf: protect resolveSystemId from integer overflow | netliomax25-code <netliomax25@gmail.com> | no | backport, https://github.com/libexpat/libexpat/commit/deeb97f7c88d17a16b0ea2521a13733abc283347 | 2026-05-29 | |
| CVE-2026-56410-2.patch | xmlwf: guard each operator in resolveSystemId length sum | netliomax25-code <netliomax25@gmail.com> | no | upstream, https://github.com/libexpat/libexpat/commit/cee20e91bf14dc7f6d2fc48f0d70d86b2dc3afea | 2026-05-30 | |
| CVE-2026-56411-0.patch | Free data->currentDoctypeName if notations is NULL We leak it and don't change it. |
AZero13 <gfunni234@gmail.com> | no | upstream, https://github.com/libexpat/libexpat/commit/2c90a96917f9b0222ef5955adf6f3ee504ad00b9 | 2025-12-28 | |
| CVE-2026-56411-1.patch | xmlwf: protect notation list allocation from integer overflow | netliomax25-code <netliomax25@gmail.com> | no | upstream, https://github.com/libexpat/libexpat/commit/528a4e5017e1bd3b48b689fd0c131df940ae3ea5 | 2026-06-02 | |
| CVE-2026-56412.patch | lib: guard XML_TOK_DATA_CHARS handler calls in doCdataSection() | hextheshadow <hextheshadow0x@gmail.com> | no | upstream, https://github.com/libexpat/libexpat/commit/d19e834794060d18c061d94452c35d725393ea58 | 2026-06-20 | |
| CVE-2026-76957.patch | Protect custom encoding callbacks from parser reentry | Darren Carreras <carrerasdarren@gmail.com> | no | upstream, https://github.com/libexpat/libexpat/pull/1322 | 2026-08-17 | |
| CVE-2026-72522.patch | Merge pull request #1296 from libexpat/mozilla-2053153 [CVE-2026-72522] Fix an OOB read and the resulting infinite loop in `*_toUtf16` functions |
Sebastian Pipping <sebastian@pipping.org> | no | backport, https://github.com/libexpat/libexpat/commit/27c6536c2bfa857b6678b1038d14f43fd65a4aa6 | 2026-08-10 |
All known versions for source package 'expat'
- 2.8.4-1 (forky, sid)
- 2.8.3-1~deb13u1 (trixie, trixie-security)
- 2.5.0-1+deb12u3 (bookworm-security)
- 2.5.0-1+deb12u2 (bookworm)