Date: Mon, 11 May 2026 22:15:47 +0000 From: Thierry Thomas <thierry@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 9f22d11e5079 - main - security/vuxml: adding an entry for expat Message-ID: <6a025513.37929.1cce448d@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by thierry: URL: https://cgit.FreeBSD.org/ports/commit/?id=9f22d11e50796885e308d61156253b9c29ffb3f6 commit 9f22d11e50796885e308d61156253b9c29ffb3f6 Author: Thierry Thomas <thierry@FreeBSD.org> AuthorDate: 2026-05-11 22:09:38 +0000 Commit: Thierry Thomas <thierry@FreeBSD.org> CommitDate: 2026-05-11 22:09:38 +0000 security/vuxml: adding an entry for expat See https://blog.hartwork.org/posts/expat-2-8-1-released/ and https://nvd.nist.gov/vuln/detail/CVE-2026-45186 Security: CVE-2026-45186 --- security/vuxml/vuln/2026.xml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index d50a9e216343..06704a3b0a68 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,32 @@ + <vuln vid="bacc1417-4d82-11f1-87f3-18dbf25a98c6"> + <topic>Vulnerability found in Expat</topic> + <affects> +<package> +<name>expat</name> +<name>linux-c7-expat</name> +<name>linux-rl9-expat</name> +<range><lt>2.8.1</lt></range> +</package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <blockquote cite="https://blog.hartwork.org/posts/expat-2-8-1-released/">; + <p>Expat 2.8.1 was released yesterday. The key motivation for cutting a release and doing so now was:</p> + <p>Fixing vulnerability CVE-2026-45186 that allows easy denial of service.</p> + <p>See also https://github.com/libexpat/libexpat/pull/1216</p>; + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2026-45186</cvename> + <url>https://nvd.nist.gov/vuln/detail/CVE-2026-45186</url>; + </references> + <dates> + <discovery>2025-10-01</discovery> + <entry>2026-05-11</entry> + </dates> + </vuln> + <vuln vid="ab2258a2-4cea-11f1-aec8-bc241107513d"> <topic>dash -- arith: INTMAX_MIN / -1 overflow</topic> <affects>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6a025513.37929.1cce448d>