Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-56132 →
ALPINE-CVE-2026-56132
In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled wh...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Alpine:v3.21
expat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-r0"}]}]
Alpine:v3.22
expat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-r0"}]}]
Alpine:v3.23
expat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-r0"}]}]
Alpine:v3.24
expat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-r0"}]}]
Références
- advisory security.alpinelinux.org