ALSA-2025%3A21776

ALSA-2025%3A21776 PUBLISHED

Record from OSV · Published November 19, 2025

Important: expat security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
expat	AlmaLinux:8	2.5.0-1.el8_10
expat-devel	AlmaLinux:8	2.5.0-1.el8_10

Affected products

Vendor	Product	Versions
AlmaLinux:8	expat	0
AlmaLinux:8	expat-devel	0

Timeline

Nov 19, 2025 CVE Published
Mar 6, 2026 Distribution Patch (2 in total, the first dated here)
Mar 12, 2026 Security Advisory
Oct 29, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ALSA-2025%3A21776
vulnetix vdb fixes ALSA-2025%3A21776

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ALSA-2025%253A21776/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →