Red Hat Security Advisory

RHSA-2026:77236

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images expat-2.8.5-1.1.hum1@aarch64, expat-2.8.5-1.1.hum1@s390x, expat-2.8.5-1.1.hum1@src +7

Fixes 1 record

TI-2026-33006 CVE-2026-45186 · GHSA-r396-2q2c-pjhr

In libexpat before 2.8.1, the computational complexity of attribute name collision checks…

LOW 33

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00479 Published 2026-05-10 Partial fix · 2.8.1 CWE-407