Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-56404

Fixed in a distro release EPSS <1%CVSS 6.9

libexpat before 2.8.2 has an integer overflow in addBinding.

Published 2026-06-21 · CVE record · OSV

Products: libexpat_project libexpat

Distro releases

ReleasePackageFixed in
Alpine 3.21expat2.8.2-r0
Alpine 3.22expat2.8.2-r0
Alpine 3.23expat2.8.2-r0
Alpine 3.24expat2.8.2-r0
Amazon Linux 2thunderbird140.12.0-1.amzn2.0.1
Amazon Linux 2023expat2.8.3-1.amzn2023.0.1
Amazon Linux 2023expat-devel2.8.3-1.amzn2023.0.1
Amazon Linux 2023expat-static2.8.3-1.amzn2023.0.1
Amazon Linux 2023firefox140.12.0-1.amzn2023.0.1
Chainguardexpat2.8.2-r0
Chainguardexpat-dev2.8.2-r0
Chainguardexpat-doc2.8.2-r0
Chainguardlibexpat12.8.2-r0
Debian 12expat2.5.0-1+deb12u3
Debian 13expat2.8.2-1~deb13u1
Debian 14expat2.8.2-1
Red Hat hummingbird 1expat0:2.8.2-1.1.hum1
Red Hat hummingbird 1expat-devel0:2.8.2-1.1.hum1
Red Hat hummingbird 1expat-static0:2.8.2-1.1.hum1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSMozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSMozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSMozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSMozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise Micro 5.3expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Micro 5.4expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Micro 5.5expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Module for Basesystem 15 SP7expat2.8.5-150700.3.15.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7MozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise Module for Package Hub 15 SP7MozillaThunderbird153.5.0-150400.13.9.1
SUSE Linux Enterprise Server 12 SP5-LTSSMozillaFirefox153.5.0-118.16.2
SUSE Linux Enterprise Server 12 SP5-LTSSexpat2.8.5-21.55.1
SUSE Linux Enterprise Server 15 SP4-LTSSMozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise Server 15 SP4-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server 15 SP5-LTSSMozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise Server 15 SP5-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server 15 SP6-LTSSMozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise Server 15 SP6-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server 16.0MozillaFirefox153.5.0-160000.1.1
SUSE Linux Enterprise Server 16.0expat2.8.4-160000.1.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5MozillaFirefox153.5.0-118.16.2
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5expat2.8.5-21.55.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4MozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5MozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6MozillaFirefox153.5.0-150400.157.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server for SAP applications 16.0MozillaFirefox153.5.0-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0expat2.8.4-160000.1.1
SUSE Linux Enterprise Workstation Extension 15 SP7MozillaThunderbird153.5.0-150400.13.9.1
SUSE Linux Micro 6.2expat2.8.4-160000.1.1
Ubuntu 16.04 LTScadaverno fix
Ubuntu 16.04 LTSgdcmno fix
Ubuntu 16.04 LTSinsighttoolkit4no fix
Ubuntu 16.04 LTSmatanzano fix
Ubuntu 16.04 LTSsmartno fix
Ubuntu 16.04 LTStdomno fix
Ubuntu 16.04 LTSwbxml2no fix
Ubuntu 18.04 LTScadaverno fix
Ubuntu 18.04 LTSgdcmno fix
Ubuntu 18.04 LTSinsighttoolkit4no fix
Ubuntu 18.04 LTSmatanzano fix
Ubuntu 18.04 LTSsmartno fix
Ubuntu 18.04 LTStdomno fix
Ubuntu 18.04 LTSvnc4no fix
Ubuntu 18.04 LTSwbxml2no fix
Ubuntu 20.04 LTScadaverno fix
Ubuntu 20.04 LTSinsighttoolkit4no fix
Ubuntu 20.04 LTSmatanzano fix
Ubuntu 20.04 LTStdomno fix
Ubuntu 20.04 LTSwbxml2no fix
Ubuntu 22.04 LTScadaverno fix
Ubuntu 22.04 LTSexpat2.4.7-1ubuntu0.8
Ubuntu 22.04 LTSinsighttoolkit4no fix
Ubuntu 22.04 LTSmatanzano fix
Ubuntu 22.04 LTStdomno fix
Ubuntu 22.04 LTSwbxml2no fix
Ubuntu 24.04 LTScadaverno fix
Ubuntu 24.04 LTSexpat2.6.1-2ubuntu0.5
Ubuntu 24.04 LTSmatanzano fix
Ubuntu 24.04 LTStdomno fix
Ubuntu 24.04 LTSwbxml2no fix
Ubuntu 25.10cadaverno fix
Ubuntu 25.10expatno fix
Ubuntu 25.10matanzano fix
Ubuntu 25.10swish-eno fix
Ubuntu 25.10tdomno fix
Ubuntu 25.10wbxml2no fix
Ubuntu 25.10xmlrpc-cno fix
Ubuntu 26.04 LTScadaverno fix
Ubuntu 26.04 LTSexpat2.7.4-1ubuntu0.1
Ubuntu 26.04 LTSmatanzano fix
Ubuntu 26.04 LTStdomno fix
Ubuntu 26.04 LTSwbxml2no fix
Ubuntu 26.04 LTSxmlrpc-cno fix
Ubuntu 26.10cadaverno fix
Ubuntu 26.10matanzano fix
Ubuntu 26.10swish-eno fix
Ubuntu 26.10tdomno fix
Ubuntu 26.10wbxml2no fix
Ubuntu 26.10xmlrpc-cno fix
Ubuntu Pro 14.04 LTScoin3no fix
Ubuntu Pro 14.04 LTSexpat2.1.0-4ubuntu1.4+esm12
Ubuntu Pro 14.04 LTSvnc4no fix
Ubuntu Pro 14.04 LTSvtkno fix
Ubuntu Pro 14.04 LTSxmlrpc-cno fix
Ubuntu Pro 16.04 LTSayttmno fix
Ubuntu Pro 16.04 LTScableswigno fix
Ubuntu Pro 16.04 LTScoin3no fix
Ubuntu Pro 16.04 LTSexpat2.1.0-7ubuntu0.16.04.5+esm13
Ubuntu Pro 16.04 LTSlibxmltok1.2-3ubuntu0.1~esm1
Ubuntu Pro 16.04 LTSswish-eno fix
Ubuntu Pro 16.04 LTSvnc4no fix
Ubuntu Pro 16.04 LTSvtkno fix
Ubuntu Pro 16.04 LTSxmlrpc-cno fix
Ubuntu Pro 18.04 LTScoin3no fix
Ubuntu Pro 18.04 LTSexpat2.2.5-3ubuntu0.9+esm4
Ubuntu Pro 18.04 LTSlibxmltok1.2-4ubuntu0.18.04.1~esm7
Ubuntu Pro 18.04 LTSswish-eno fix
Ubuntu Pro 18.04 LTSxmlrpc-cno fix
Ubuntu Pro 20.04 LTSexpat2.2.9-1ubuntu0.8+esm2
Ubuntu Pro 20.04 LTSlibxmltok1.2-4ubuntu0.20.04.1~esm7
Ubuntu Pro 20.04 LTSswish-eno fix
Ubuntu Pro 20.04 LTSxmlrpc-cno fix
Ubuntu Pro 22.04 LTSlibxmltok1.2-4ubuntu0.22.04.1~esm7
Ubuntu Pro 22.04 LTSswish-eno fix
Ubuntu Pro 22.04 LTSxmlrpc-cno fix
Ubuntu Pro 24.04 LTSlibxmltok1.2-4.1ubuntu2.24.0.4.1+esm5
Ubuntu Pro 24.04 LTSswish-eno fix
Ubuntu Pro 24.04 LTSxmlrpc-cno fix
Ubuntu Pro 26.04 LTSswish-eno fix
Wolfiexpat2.8.2-r0
Wolfiexpat-dev2.8.2-r0
Wolfiexpat-doc2.8.2-r0
Wolfilibexpat12.8.2-r0
openSUSE Leap 16.0MozillaFirefox153.5.0-160000.1.1
openSUSE Leap 16.0expat2.8.4-160000.1.1
openSUSE Tumbleweedexpat2.8.2-1.1