Mageia alert MGASA-2026-0352 (expat, mingq-expat)

From:
             
 
Mageia Updates <updates-announce@ml.mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2026-0352: Updated expat & mingw-expat packages fix security vulnerabilities
Date:
             
 
Mon, 31 Aug 2026 21:41:22 +0200
Message-ID:
             
 
<20260831194122.7B3089FEBA@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2026-0352 - Updated expat & mingw-expat packages fix security vulnerabilities

Publication date: 31 Aug 2026
URL: https://advisories.mageia.org/MGASA-2026-0352.html
Type: security
Affected Mageia releases: 10
CVE: CVE-2026-50219,
     CVE-2026-56131,
     CVE-2026-56132,
     CVE-2026-56403,
     CVE-2026-56404,
     CVE-2026-56405,
     CVE-2026-56406,
     CVE-2026-56407,
     CVE-2026-56408,
     CVE-2026-56409,
     CVE-2026-56410,
     CVE-2026-56411,
     CVE-2026-56412,
     CVE-2026-72522

Description:
Missing control flow integrity checks. (CVE-2026-50219)
Missing control flow integrity checks. (CVE-2026-56131)
Out-of-bounds write. (CVE-2026-56132)
Integer overflow. (CVE-2026-56403)
Integer overflow. (CVE-2026-56404)
Integer overflow. (CVE-2026-56405)
Integer overflow. (CVE-2026-56406)
Integer overflow. (CVE-2026-56407)
Integer overflow. (CVE-2026-56408)
Integer overflow. (CVE-2026-56409)
Integer overflow. (CVE-2026-56410)
Integer overflow. (CVE-2026-56411)
Missing control flow integrity checks. (CVE-2026-56412)

References:
- https://bugs.mageia.org/show_bug.cgi?id=35758
- https://www.openwall.com/lists/oss-security/2026/06/25/10
- https://blog.hartwork.org/posts/expat-2-8-2-released/
- https://github.com/libexpat/libexpat/blob/R_2_8_2/expat/C...
- https://www.cve.org/CVERecord?id=CVE-2026-50219
- https://www.cve.org/CVERecord?id=CVE-2026-56131
- https://www.cve.org/CVERecord?id=CVE-2026-56132
- https://www.cve.org/CVERecord?id=CVE-2026-56403
- https://www.cve.org/CVERecord?id=CVE-2026-56404
- https://www.cve.org/CVERecord?id=CVE-2026-56405
- https://www.cve.org/CVERecord?id=CVE-2026-56406
- https://www.cve.org/CVERecord?id=CVE-2026-56407
- https://www.cve.org/CVERecord?id=CVE-2026-56408
- https://www.cve.org/CVERecord?id=CVE-2026-56409
- https://www.cve.org/CVERecord?id=CVE-2026-56410
- https://www.cve.org/CVERecord?id=CVE-2026-56411
- https://www.cve.org/CVERecord?id=CVE-2026-56412
- https://www.cve.org/CVERecord?id=CVE-2026-72522

SRPMS:
- 10/core/expat-2.8.3-1.mga10
- 10/core/mingw-expat-2.8.3-1.mga10