Packages / Debian 13 (Trixie) / libdevel / libexpat1-dev

Package: libexpat1-dev (2.7.1-2)

Libreria C per l'analisi XML - kit di sviluppo

Other Packages Related to libexpat1-dev:

dep: [libexpat1] (= 2.7.1-2)
Libreria C per il parsing XML - libreria runtime
dep: [libc6-dev]
GNU C Library: Development Libraries and Header Files
dep: libc-dev
Package not available

Download libexpat1-dev

Architecture	Package size	Installed size	Files	Package
amd64	180 KiB	964 KiB	list of files	Download
arm64	159 KiB	777 KiB	list of files	Download

Percorsi file del pacchetto (36)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/include/aarch64-linux-gnu/expat_config.h
/usr/include/expat_external.h
/usr/include/expat.h
/usr/include/x86_64-linux-gnu/expat_config.h
/usr/lib/aarch64-linux-gnu/cmake/expat-2.7.1/expat.cmake
/usr/lib/aarch64-linux-gnu/cmake/expat-2.7.1/expat-config.cmake
/usr/lib/aarch64-linux-gnu/cmake/expat-2.7.1/expat-config-version.cmake
/usr/lib/aarch64-linux-gnu/cmake/expat-2.7.1/expat-noconfig.cmake
/usr/lib/aarch64-linux-gnu/libexpat.a
/usr/lib/aarch64-linux-gnu/libexpat.so
/usr/lib/aarch64-linux-gnu/libexpatw.a
/usr/lib/aarch64-linux-gnu/libexpatw.so
/usr/lib/aarch64-linux-gnu/pkgconfig/expat.pc
/usr/lib/x86_64-linux-gnu/cmake/expat-2.7.1/expat.cmake
/usr/lib/x86_64-linux-gnu/cmake/expat-2.7.1/expat-config.cmake
/usr/lib/x86_64-linux-gnu/cmake/expat-2.7.1/expat-config-version.cmake
/usr/lib/x86_64-linux-gnu/cmake/expat-2.7.1/expat-noconfig.cmake
/usr/lib/x86_64-linux-gnu/libexpat.a
/usr/lib/x86_64-linux-gnu/libexpat.so
/usr/lib/x86_64-linux-gnu/libexpatw.a
/usr/lib/x86_64-linux-gnu/libexpatw.so
/usr/lib/x86_64-linux-gnu/pkgconfig/expat.pc
/usr/share/aclocal/expat.m4
/usr/share/doc-base/libexpat1-dev.expat
/usr/share/doc/libexpat1-dev/changelog.Debian.gz
/usr/share/doc/libexpat1-dev/changelog.gz
/usr/share/doc/libexpat1-dev/copyright
/usr/share/doc/libexpat1-dev/examples/element_declarations.c
/usr/share/doc/libexpat1-dev/examples/elements.c
/usr/share/doc/libexpat1-dev/examples/outline.c
/usr/share/doc/libexpat1-dev/expat.html/index.html
/usr/share/doc/libexpat1-dev/expat.html/ok.min.css
/usr/share/doc/libexpat1-dev/expat.html/reference.html
/usr/share/doc/libexpat1-dev/expat.html/style.css
/usr/share/doc/libexpat1-dev/expat.html/xmlwf.xml.gz
/usr/share/doc/libexpat1-dev/TODO.Debian

Field source: Debian 13 (Trixie) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 13 (Trixie) nel browser Crea un'immagine che include libexpat1-dev

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
2.7.1-2	trixie / main	amd64	Debian 13 · main · amd64	157 KiB	843 KiB	pool/main/e/expat/libexpat1-dev_2.7.1-2_amd64.deb
2.7.1-2	trixie / main	arm64	Debian 13 · main · arm64	142 KiB	700 KiB	pool/main/e/expat/libexpat1-dev_2.7.1-2_arm64.deb
2.9.0-1~deb13u1	trixie-security / main	amd64	Debian 13 security · main · amd64	180 KiB	964 KiB	pool/updates/main/e/expat/libexpat1-dev_2.9.0-1~deb13u1_amd64.deb
2.8.3-1~deb13u1	trixie-security / main	arm64	Debian 13 security · main · arm64	159 KiB	777 KiB	pool/updates/main/e/expat/libexpat1-dev_2.8.3-1~deb13u1_arm64.deb
2.8.3-1~deb13u1 (withdrawn)	trixie-security / main	amd64	Debian 13 security · main · amd64	175 KiB	925 KiB	pool/updates/main/e/expat/libexpat1-dev_2.8.3-1~deb13u1_amd64.deb
2.8.2-1~deb13u1 (withdrawn)	trixie-security / main	amd64	Debian 13 security · main · amd64	174 KiB	922 KiB	pool/updates/main/e/expat/libexpat1-dev_2.8.2-1~deb13u1_amd64.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-115506] expat: CVE-2026-115506	High(8.7)	Interessata Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata dsa · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata dsa · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Interessata dsa · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Interessata dsa · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Interessata dsa · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Interessata dsa · expat · debian · 13
[CVE-2026-77214] expat: CVE-2026-77214	High(8.3)	Interessata Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.9.0-1~deb13u1` dsa · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.9.0-1~deb13u1` dsa · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Interessata · Corretta: `2.9.0-1~deb13u1` dsa · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Interessata · Corretta: `2.9.0-1~deb13u1` dsa · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Interessata · Corretta: `2.9.0-1~deb13u1` dsa · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.9.0-1~deb13u1` dsa · expat · debian · 13
[CVE-2026-102633] libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to ap	High(8.2)	Interessata Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.9.0-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.9.0-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Interessata · Corretta: `2.9.0-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Interessata · Corretta: `2.9.0-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Interessata · Corretta: `2.9.0-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.9.0-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-72522] libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.	High(8.7)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:42:29 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.3-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.3-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Interessata · Corretta: `2.8.3-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.3-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.3-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.3-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56411] xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.	High(8.7)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:45:34 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56410] xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.	High(8.7)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:45:34 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56409] xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.	High(8.7)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:45:34 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56407] libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.	High(8.7)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:45:34 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56406] libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.	High(8.7)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:45:34 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56131] libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-502	High(8.7)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:45:34 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56132] In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.	High(8.7)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:45:34 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-50219] libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation.	Medium(6.9)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 10:03:59 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56403] libexpat before 2.8.2 has an integer overflow in storeAtts.	Medium(6.9)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 10:03:59 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56404] libexpat before 2.8.2 has an integer overflow in addBinding.	Medium(6.9)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 10:03:59 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56405] libexpat before 2.8.2 has an integer overflow in getAttributeId.	Medium(6.9)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 10:03:59 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56408] libexpat before 2.8.2 has an integer overflow in copyString.	Medium(6.9)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 10:03:59 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-56412] libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a u	Medium(6.9)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 10:03:59 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-45186] In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 10:03:59 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-41080] libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.	Medium(6.9)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 10:32:49 PM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` nvd · expat · debian · 13
[CVE-2026-32776] Expat vulnerabilities	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 24, 2026, 12:37:08 AM UTC Dettagli (6) `2.7.1-2` · amd64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` usn · expat · debian · 13 `2.7.1-2` · arm64 · trixie Interessata · Corretta: `2.8.2-1~deb13u1` usn · expat · debian · 13 `2.8.2-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` usn · expat · debian · 13 `2.8.3-1~deb13u1` · amd64 · trixie-security · Historical version Corretta · Corretta: `2.8.2-1~deb13u1` usn · expat · debian · 13 `2.8.3-1~deb13u1` · arm64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` usn · expat · debian · 13 `2.9.0-1~deb13u1` · amd64 · trixie-security Corretta · Corretta: `2.8.2-1~deb13u1` usn · expat · debian · 13

[Altri risultati]

Ultima sincronizzazione: Oct 24, 2026, 4:14:12 AM UTC

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.7.1-2 / amd64Osservato Sep 1, 2026sha256 ac1e7f8ad815…b2064372Impronta della fonte