Red Hat Product Errata RHSA-2026:64810 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:64810 - Security Advisory Overview Updated Packages Synopsis Moderate: expat security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for expat is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Expat is a C library for parsing XML documents. Security Fix(es): expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2484620 - CVE-2026-50219 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking BZ - 2490669 - CVE-2026-56132 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVEs CVE-2026-50219 CVE-2026-56132 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM expat-2.7.3-1.el10_2.3.src.rpm SHA-256: 0e374c836935a7e07de43136299688b3bb172bce5a85754f923c57c36168ee26 x86_64 expat-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: 2f0c525858f8a52069796979aff0d064d81225641f00de54eb40e5eacf211735 expat-debuginfo-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: bb1463521eb4dc7234bca9f14cbd4c9bd51ef60bf5a3ad44c33ab48a22527061 expat-debuginfo-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: bb1463521eb4dc7234bca9f14cbd4c9bd51ef60bf5a3ad44c33ab48a22527061 expat-debugsource-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: 73243ed6e0992b06ba219e198a1ddc656d4efab4a2cff171c676fda7455537da expat-debugsource-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: 73243ed6e0992b06ba219e198a1ddc656d4efab4a2cff171c676fda7455537da expat-devel-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: a631f30c71081a737a817791a598d14b069d1a3f22cdf2bc032757db70227f39 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM expat-2.7.3-1.el10_2.3.src.rpm SHA-256: 0e374c836935a7e07de43136299688b3bb172bce5a85754f923c57c36168ee26 x86_64 expat-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: 2f0c525858f8a52069796979aff0d064d81225641f00de54eb40e5eacf211735 expat-debuginfo-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: bb1463521eb4dc7234bca9f14cbd4c9bd51ef60bf5a3ad44c33ab48a22527061 expat-debuginfo-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: bb1463521eb4dc7234bca9f14cbd4c9bd51ef60bf5a3ad44c33ab48a22527061 expat-debugsource-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: 73243ed6e0992b06ba219e198a1ddc656d4efab4a2cff171c676fda7455537da expat-debugsource-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: 73243ed6e0992b06ba219e198a1ddc656d4efab4a2cff171c676fda7455537da expat-devel-2.7.3-1.el10_2.3.x86_64.rpm SHA-256: a631f30c71081a737a817791a598d14b069d1a3f22cdf2bc032757db70227f39 Red Hat Enterprise Linux for IBM z Systems 10 SRPM expat-2.7.3-1.el10_2.3.src.rpm SHA-256: 0e374c836935a7e07de43136299688b3bb172bce5a85754f923c57c36168ee26 s390x expat-2.7.3-1.el10_2.3.s390x.rpm SHA-256: f5d72cf7d21c64f80a1e836623537aee60087b4351ec5e5134fe631c68b8ee29 expat-debuginfo-2.7.3-1.el10_2.3.s390x.rpm SHA-256: 1be2648077c023f8e582f844fe7e89367d9ae131c47070747f9b5db34ec49f24 expat-debuginfo-2.7.3-1.el10_2.3.s390x.rpm SHA-256: 1be2648077c023f8e582f844fe7e89367d9ae131c47070747f9b5db34ec49f24 expat-debugsource-2.7.3-1.el10_2.3.s390x.rpm SHA-256: 0c77a2570451cc2b05a6f3b13e0efab30fd36c057deb81033500e4e8235208ff expat-debugsource-2.7.3-1.el10_2.3.s390x.rpm SHA-256: 0c77a2570451cc2b05a6f3b13e0efab30fd36c057deb81033500e4e8235208ff expat-devel-2.7.3-1.el10_2.3.s390x.rpm SHA-256: cfd7370f6ba73d0ad9cb656402f671c88683c3f34beed7bf8dcb16652b5d2c30 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM expat-2.7.3-1.el10_2.3.src.rpm SHA-256: 0e374c836935a7e07de43136299688b3bb172bce5a85754f923c57c36168ee26 s390x expat-2.7.3-1.el10_2.3.s390x.rpm SHA-256: f5d72cf7d21c64f80a1e836623537aee60087b4351ec5e5134fe631c68b8ee29 expat-debuginfo-2.7.3-1.el10_2.3.s390x.rpm SHA-256: 1be2648077c023f8e582f844fe7e89367d9ae131c47070747f9b5db34ec49f24 expat-debuginfo-2.7.3-1.el10_2.3.s390x.rpm SHA-256: 1be2648077c023f8e582f844fe7e89367d9ae131c47070747f9b5db34ec49f24 expat-debugsource-2.7.3-1.el10_2.3.s390x.rpm SHA-256: 0c77a2570451cc2b05a6f3b13e0efab30fd36c057deb81033500e4e8235208ff expat-debugsource-2.7.3-1.el10_2.3.s390x.rpm SHA-256: 0c77a2570451cc2b05a6f3b13e0efab30fd36c057deb81033500e4e8235208ff expat-devel-2.7.3-1.el10_2.3.s390x.rpm SHA-256: cfd7370f6ba73d0ad9cb656402f671c88683c3f34beed7bf8dcb16652b5d2c30 Red Hat Enterprise Linux for Power, little endian 10 SRPM expat-2.7.3-1.el10_2.3.src.rpm SHA-256: 0e374c836935a7e07de43136299688b3bb172bce5a85754f923c57c36168ee26 ppc64le expat-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: cecdd37c2c96065fea038fbaedfc023c5ebcaad18173f83a18ae8e66d3cb9b09 expat-debuginfo-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: 1995941180d22354f0c54bc211b924eeeeda911dc8435c6ab2f6518cfe599aad expat-debuginfo-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: 1995941180d22354f0c54bc211b924eeeeda911dc8435c6ab2f6518cfe599aad expat-debugsource-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: 938c098076f2cfe994edb884f1d5a8083657c5830b312fe214ab8476b4d03736 expat-debugsource-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: 938c098076f2cfe994edb884f1d5a8083657c5830b312fe214ab8476b4d03736 expat-devel-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: d93d1a9e7af92958b763c578788c9e5bed62bb0acf920fa7a83d3130ae5456e6 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM expat-2.7.3-1.el10_2.3.src.rpm SHA-256: 0e374c836935a7e07de43136299688b3bb172bce5a85754f923c57c36168ee26 ppc64le expat-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: cecdd37c2c96065fea038fbaedfc023c5ebcaad18173f83a18ae8e66d3cb9b09 expat-debuginfo-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: 1995941180d22354f0c54bc211b924eeeeda911dc8435c6ab2f6518cfe599aad expat-debuginfo-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: 1995941180d22354f0c54bc211b924eeeeda911dc8435c6ab2f6518cfe599aad expat-debugsource-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: 938c098076f2cfe994edb884f1d5a8083657c5830b312fe214ab8476b4d03736 expat-debugsource-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: 938c098076f2cfe994edb884f1d5a8083657c5830b312fe214ab8476b4d03736 expat-devel-2.7.3-1.el10_2.3.ppc64le.rpm SHA-256: d93d1a9e7af92958b763c578788c9e5bed62bb0acf920fa7a83d3130ae5456e6 Red Hat Enterprise Linux for ARM 64 10 SRPM expat-2.7.3-1.el10_2.3.src.rpm SHA-256: 0e374c836935a7e07de43136299688b3bb172bce5a85754f923c57c36168ee26 aarch64 expat-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: c2cc96badf054560d11e4d5041e10e51b38dedca132d3ebeb0cb219b4f1f9955 expat-debuginfo-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: 2e08d016f74930c8f9a1ff5e877f6d28400a1bfe38bbfb0568cda68b510ef87c expat-debuginfo-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: 2e08d016f74930c8f9a1ff5e877f6d28400a1bfe38bbfb0568cda68b510ef87c expat-debugsource-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: 53decf205b785121e0cef8322f20ab5ea9aecb940cb0f776cf8bf93b2e704d3e expat-debugsource-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: 53decf205b785121e0cef8322f20ab5ea9aecb940cb0f776cf8bf93b2e704d3e expat-devel-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: b2af569dde3e839655178b404193bd24317dbb6bb746426adcce5c622cd83ba8 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM expat-2.7.3-1.el10_2.3.src.rpm SHA-256: 0e374c836935a7e07de43136299688b3bb172bce5a85754f923c57c36168ee26 aarch64 expat-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: c2cc96badf054560d11e4d5041e10e51b38dedca132d3ebeb0cb219b4f1f9955 expat-debuginfo-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: 2e08d016f74930c8f9a1ff5e877f6d28400a1bfe38bbfb0568cda68b510ef87c expat-debuginfo-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: 2e08d016f74930c8f9a1ff5e877f6d28400a1bfe38bbfb0568cda68b510ef87c expat-debugsource-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: 53decf205b785121e0cef8322f20ab5ea9aecb940cb0f776cf8bf93b2e704d3e expat-debugsource-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: 53decf205b785121e0cef8322f20ab5ea9aecb940cb0f776cf8bf93b2e704d3e expat-devel-2.7.3-1.el10_2.3.aarch64.rpm SHA-256: b2af569dde3e839655178b404193bd24317dbb6bb746426adcce5c622cd83ba8 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM expat-2.7.3-1.el10_2.3.s