Skip to content
OpenAdvisories
Low RHSA-2026:33840 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 1, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 libxml2 0:2.15.3-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libxml2-16 0:2.15.3-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libxml2-devel 0:2.15.3-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libxml2-static 0:2.15.3-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-libxml2 0:2.15.3-0.1.1.hum1

Vulnerabilities 1

  • Low 1.8
    CVE-2026-11979

    Stack-Based Buffer Overflow in libxml2

    libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell() function processes user input using fixed-size stack buffers without proper bounds checking. By supplying an overly long inp…

    xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-11979
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33840.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2494191
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-11979
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-11979
  • article
    https://cert.pl/en/posts/2026/06/CVE-2026-11979
  • article
    https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e