Red Hat Security Advisory

RHSA-2026:11004

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-04-27 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Hardened Images expat-2.8.0-0.1.hum1@aarch64, expat-2.8.0-0.1.hum1@src, expat-2.8.0-0.1.hum1@x86_64 +4

TI-2026-29717 CVE-2026-41080 · GHSA-fpqv-cr66-h6pc

LOW 33

libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00398 Published 2026-04-16 Partial fix · 2.8.0 CWE-331