Advisories » MGASA-2026-0352

Updated expat & mingw-expat packages fix security vulnerabilities

Publication date: 31 Aug 2026
Modification date: 31 Aug 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-50219 , CVE-2026-56131 , CVE-2026-56132 , CVE-2026-56403 , CVE-2026-56404 , CVE-2026-56405 , CVE-2026-56406 , CVE-2026-56407 , CVE-2026-56408 , CVE-2026-56409 , CVE-2026-56410 , CVE-2026-56411 , CVE-2026-56412 , CVE-2026-72522

Description

Missing control flow integrity checks. (CVE-2026-50219)
Missing control flow integrity checks. (CVE-2026-56131)
Out-of-bounds write. (CVE-2026-56132)
Integer overflow. (CVE-2026-56403)
Integer overflow. (CVE-2026-56404)
Integer overflow. (CVE-2026-56405)
Integer overflow. (CVE-2026-56406)
Integer overflow. (CVE-2026-56407)
Integer overflow. (CVE-2026-56408)
Integer overflow. (CVE-2026-56409)
Integer overflow. (CVE-2026-56410)
Integer overflow. (CVE-2026-56411)
Missing control flow integrity checks. (CVE-2026-56412)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35758
• https://www.openwall.com/lists/oss-security/2026/06/25/10
• https://blog.hartwork.org/posts/expat-2-8-2-released/
• https://github.com/libexpat/libexpat/blob/R_2_8_2/expat/Changes
• https://www.cve.org/CVERecord?id=CVE-2026-50219
• https://www.cve.org/CVERecord?id=CVE-2026-56131
• https://www.cve.org/CVERecord?id=CVE-2026-56132
• https://www.cve.org/CVERecord?id=CVE-2026-56403
• https://www.cve.org/CVERecord?id=CVE-2026-56404
• https://www.cve.org/CVERecord?id=CVE-2026-56405
• https://www.cve.org/CVERecord?id=CVE-2026-56406
• https://www.cve.org/CVERecord?id=CVE-2026-56407
• https://www.cve.org/CVERecord?id=CVE-2026-56408
• https://www.cve.org/CVERecord?id=CVE-2026-56409
• https://www.cve.org/CVERecord?id=CVE-2026-56410
• https://www.cve.org/CVERecord?id=CVE-2026-56411
• https://www.cve.org/CVERecord?id=CVE-2026-56412
• https://www.cve.org/CVERecord?id=CVE-2026-72522

SRPMS

10/core

• expat-2.8.3-1.mga10
• mingw-expat-2.8.3-1.mga10