[DSA 6566-1] expat security update

{
  "id": "5dd28ae700ae9b1f2d5c23826dca1e29df3e503a0bf3235f23fa4737fc94face",
  "url": "https://lists.debian.org/debian-security-announce/2026/msg00480.html",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "[DSA 6566-1] expat security update",
    "summary": "Several Expat vulnerabilities could cause denial of service or potentially arbitrary code execution when processing malformed XML. The issues are fixed for Debian stable (trixie) in expat 2.9.0-1~deb13u1.",
    "evidence": "For the stable distribution (trixie), these problems have been fixed in version 2.9.0-1~deb13u1.",
    "products": [
      {
        "name": {
          "value": "expat",
          "evidence": "Package : expat"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "2.9.0-1~deb13u1",
            "evidence": "these problems have been fixed in version 2.9.0-1~deb13u1"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-66046",
        "evidence": "CVE-2026-66046"
      },
      {
        "value": "CVE-2026-76956",
        "evidence": "CVE-2026-76956"
      },
      {
        "value": "CVE-2026-76957",
        "evidence": "CVE-2026-76957"
      },
      {
        "value": "CVE-2026-77214",
        "evidence": "CVE-2026-77214"
      },
      {
        "value": "CVE-2026-93990",
        "evidence": "CVE-2026-93990"
      },
      {
        "value": "CVE-2026-102633",
        "evidence": "CVE-2026-102633"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-debian-dsa",
  "document_id": 23404,
  "published_at": "2026-10-16T00:00:00+00:00"
}