DSA-5085-2

expat - regression update

No scoreFix available

Affected packages

Affected packages
Package	Affected	Fixed
`expat` Debian:10	before 2.2.6-2+deb10u4, plus listed versions 2.2.6-22.2.6-2+deb10u12.2.6-2+deb10u22.2.6-2+deb10u3	2.2.6-2+deb10u4
`expat` Debian:11	before 2.2.10-2+deb11u3, plus listed versions 2.2.10-22.2.10-2+deb11u12.2.10-2+deb11u2	2.2.10-2+deb11u3

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

DSA-5085-2 is a vulnerability with no CVSS score yet in expat, published March 13, 2022. No source lists public exploit code. Fixed in expat 2.2.6-2+deb10u4.