Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 9 expat Important NULL Dereference Issues MGASA-2026-0061

mageia
Calendar Grey March 20, 2026
Dist Mageia Esm H88
Updated expat packages in Mageia address important security issues with NULL pointer dereference and infinite loops.
MGASA-2026-0061 - Updated expat packages fix security vulnerabilities

Summary

Description: libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content. (CVE-2026-32776) libexpat before 2.7.5 allows an infinite loop while parsing DTD content. (CVE-2026-32777) libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier out-of-memory condition. (CVE-2026-32778)

References

- https://bugs.mageia.org/show_bug.cgi?id=35227

- https://www.openwall.com/lists/oss-security/2026/03/17/10

- https://www.cve.org/CVERecord?id=CVE-2026-32776

- https://www.cve.org/CVERecord?id=CVE-2026-32777

- https://www.cve.org/CVERecord?id=CVE-2026-32778

Topics%20covered

Topics Covered

security advisory security issue local exploit important Mageia resource compromise

Resolution

SRPMS

- 9/core/expat-2.7.5-1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 20 Mar 2026
URL: https://advisories.mageia.org/MGASA-2026-0061.html
Type: security
CVE: CVE-2026-32776, CVE-2026-32777, CVE-2026-32778

Topics%20covered

Topics Covered

security advisory security issue local exploit important Mageia resource compromise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here