Red Hat Security Advisory

RHSA-2026:5396

Red Hat Hardened Images RPM Release

Released 2026-03-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images expat-2.7.5-1.hum1@aarch64, expat-2.7.5-1.hum1@src, expat-2.7.5-1.hum1@x86_64 +4

TI-2025-36934 CVE-2025-59375 · GHSA-vjqp-pjp6-xcxx

LOW 36

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0138 Published 2025-09-15 Partial fix · 2.7.2 CWE-770