HCE2-SA-2026-0053 Moderate HCE 2.0 Security Fix(es): In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation. (CVE-2026-25210) In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data. (CVE-2026-24515) HCE 2.0 expat-2.4.1-5.r12.hce2.x86_64.rpm expat-devel-2.4.1-5.r12.hce2.x86_64.rpm expat-help-2.4.1-5.r12.hce2.noarch.rpm expat-2.4.1-5.r12.hce2.aarch64.rpm expat-devel-2.4.1-5.r12.hce2.aarch64.rpm