-
Tue Sep 29 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.7.3-61
- CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity
in attribute processing
-
Tue Sep 29 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.7.3-60
- CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input
-
Fri Jul 31 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.7.3-59
- Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog
-
Fri Jul 31 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.7.3-58
- Fix CVE-2026-50219: forbid XML_ParserFree/Reset from handlers
-
Wed May 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 2.7.3-57
- expat: backport CVE-2026-45186 fix (attribute collision check DoS)
-
Tue Dec 02 2025 Tomas Korbar <tkorbar@redhat.com> - 2.7.3-56
- Rebase to 2.7.3 and add VCS tag
-
Thu Jun 05 2025 psklenar@redhat.com <psklenar@redhat.com>
- https://issues.redhat.com/browse/RHELMISC-13073
-
Fri Mar 28 2025 Tomas Korbar <tkorbar@redhat.com>
- Fix behavior change caused by fix for CVE-2024-8176
-
Fri Mar 14 2025 Tomas Korbar <tkorbar@redhat.com>
- Fix CVE-2024-8176
-
Thu Nov 07 2024 Tomas Korbar <tkorbar@redhat.com>
- Rebase to 2.6.4