Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 3

Vulnerabilities 2

• High 7.5
  CVE-2026-115506

  libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay

  libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nes…

  libexpat project libexpat insighttoolkit4 cmake Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 22, 2026
• Medium 5.9
  CVE-2026-113351

  libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset

  libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail…

  libexpat project libexpat insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 20, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-113351
• report
  https://access.redhat.com/security/cve/CVE-2026-115506
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90325.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556110
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-113351
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-113351
• article
  https://github.com/libexpat/libexpat
• article
  https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560
• article
  https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884
• article
  https://github.com/libexpat/libexpat/pull/1431
• article
  https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2559312
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-115506
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-115506
• article
  https://github.com/hannob/lololol
• article
  https://github.com/libexpat/libexpat/issues/1160
• article
  https://github.com/libexpat/libexpat/pull/1433
• article
  https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay