Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 5

Vulnerabilities 9

• High 8.5
  CVE-2026-74860

  Libxml2: double-free/uaf in libxml2 python bindings

  A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-fre…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Sep 8, 2026
• High 8.0
  CVE-2026-86140

  In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux
  Sep 5, 2026
• Medium 6.9
  CVE-2026-86138

  In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux
  Sep 5, 2026
• Medium 6.9
  CVE-2026-86139

  In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux
  Sep 5, 2026
• Medium 6.9
  CVE-2026-86142

  In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer …

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux
  Sep 5, 2026
• Medium 6.9
  CVE-2026-86143

  In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to …

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux
  Sep 5, 2026
• Medium 5.6
  CVE-2026-86144

  In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This h…

  xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux
  Sep 5, 2026
• Low 2.9
  CVE-2026-86137

  In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro …

  xmlsoft libxml2 libxml2 libxml2 Debian Azure Linux
  Sep 5, 2026
• Low 2.9
  CVE-2026-86141

  xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., …

  xmlsoft libxml2 libxml2 libxml2 Debian Azure Linux
  Sep 5, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-86137
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-86143
• report
  https://access.redhat.com/security/cve/CVE-2026-86141
• report
  https://access.redhat.com/security/cve/CVE-2026-86140
• report
  https://access.redhat.com/security/cve/CVE-2026-86138
• report
  https://access.redhat.com/security/cve/CVE-2026-86144
• report
  https://access.redhat.com/security/cve/CVE-2026-86139
• report
  https://access.redhat.com/security/cve/CVE-2026-86142
• report
  https://access.redhat.com/security/cve/CVE-2026-74860
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_64463.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2529697
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-74860
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-74860
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2528985
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-86137
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-86137
• article
  https://github.com/GNOME/libxml2/commit/76fe08d97de88bfaef2f7d5cd27f11954cc5bee2
• article
  https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1099
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2528986
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-86138
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-86138
• article
  https://github.com/GNOME/libxml2/commit/a4cba4b5b5a8c42e155ed42d2d2a44955465a2e4
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2528991
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-86139
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-86139
• article
  https://github.com/GNOME/libxml2/commit/8edbbdb09f24d26a2f900141fddc2b9d014f53b0
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2528989
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-86140
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-86140
• article
  https://github.com/GNOME/libxml2/commit/d1686f91dbda141a752200419d35639fd6b38340
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2528988
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-86141
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-86141
• article
  https://github.com/GNOME/libxml2/commit/e89a8aae4c9b40cdafcf66b3f9e57c62db37bb55
• article
  https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1107
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2528990