[Deepin Integration]~[v25-Release] fix(expat): batch fix 9 CVE vulnerabilities via quilt patches by deepin-ci-robot@deepin-community/expat by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
expat	2.8.0-2deepin1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4349/testing/ ./

Changelog | 更新信息

expat (2.8.0-2deepin1) unstable; urgency=high

• Backport upstream fixes for multiple CVEs via quilt patches:
  • CVE-2026-56403: protect storeAtts from signed integer overflow
  • CVE-2026-56404: fix addBinding integer overflow
  • CVE-2026-56405: fix getAttributeId integer overflow
  • CVE-2026-56406: fix XML_ParseBuffer overflow check
  • CVE-2026-56408: fix copyString integer overflow
  • CVE-2026-56410: xmlwf: protect resolveSystemId from integer overflow
  • CVE-2026-56412: guard XML_TOK_DATA_CHARS handler calls
  • CVE-2026-56132: fix doProlog scaffolding OOB write
  • CVE-2026-50219: Introduce handler call depth tracking

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#4349