CERT24RHSA-2026:30647 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateLoading data…
CERT24Threat Observatory
Period

RHSA-2026:30647 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Two flaws were identified in libexpat. In versions before 2.8.2, the library does not properly track handler call depth when certain XML parsing functions are invoked from within handlers during a policy violation, which may cause a use-after-free condition. A second flaw is a heap-based buffer overflow when processing specially crafted XML, particularly when multiple parsers share data.

← Back to intelligence

RHSA-2026:30647 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Two flaws were identified in libexpat. In versions before 2.8.2, the library does not properly track handler call depth when certain XML parsing functions are invoked from within handlers during a policy violation, which may cause a use-after-free condition. A second flaw is a heap-based buffer overflow when processing specially crafted XML, particularly when multiple parsers share data.