Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 3

Vulnerabilities 2

• Medium 5.9
  CVE-2026-76956

  In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, …

  libexpat project libexpat insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Aug 20, 2026
• Medium 4.9
  CVE-2026-76957

  libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occu…

  libexpat project libexpat insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Aug 20, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-76956
• report
  https://access.redhat.com/security/cve/CVE-2026-76957
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60451.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2520124
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-76956
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-76956
• article
  https://github.com/libexpat/libexpat/pull/1326
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2520125
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-76957
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-76957
• article
  https://github.com/libexpat/libexpat/pull/1322
• article
  https://github.com/libexpat/libexpat/pull/1329