Red Hat Product Errata RHSA-2026:64812 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:64812 - Security Advisory Overview Updated Packages Synopsis Moderate: expat security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for expat is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Expat is a C library for parsing XML documents. Security Fix(es): expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking (CVE-2026-50219) expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow (CVE-2026-56132) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2484620 - CVE-2026-50219 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking BZ - 2490669 - CVE-2026-56132 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVEs CVE-2026-50219 CVE-2026-56132 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM expat-2.5.0-6.el9_8.3.src.rpm SHA-256: 0cff2a2213384dc43eb1874bf6e77b2b8230be848f50387d8057e0e6cde3d392 x86_64 expat-2.5.0-6.el9_8.3.i686.rpm SHA-256: e1beabe0c0005fa61eba339f24dc8d207126d47959ec70687230165e85748296 expat-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: 3c9c96529f94f84fc19c8039d8852269e1085d16b5af2933f44ff286dec66a35 expat-debuginfo-2.5.0-6.el9_8.3.i686.rpm SHA-256: bfa16cd5df6a47a44f10465cdc0dc27dc43defa0438b0276165a3665cc158011 expat-debuginfo-2.5.0-6.el9_8.3.i686.rpm SHA-256: bfa16cd5df6a47a44f10465cdc0dc27dc43defa0438b0276165a3665cc158011 expat-debuginfo-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: e06ecd02742fa05b1cee92e23260837b68d70af0b7e256deb53afd1e87ba8b72 expat-debuginfo-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: e06ecd02742fa05b1cee92e23260837b68d70af0b7e256deb53afd1e87ba8b72 expat-debugsource-2.5.0-6.el9_8.3.i686.rpm SHA-256: 0adea3f3cb906e6ed6776cad894d8c38057085080ef6bee463469955d375ca55 expat-debugsource-2.5.0-6.el9_8.3.i686.rpm SHA-256: 0adea3f3cb906e6ed6776cad894d8c38057085080ef6bee463469955d375ca55 expat-debugsource-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: 721f62987696082e346dffa2d58e586eb1085a40efea9d69591e37813c5910e0 expat-debugsource-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: 721f62987696082e346dffa2d58e586eb1085a40efea9d69591e37813c5910e0 expat-devel-2.5.0-6.el9_8.3.i686.rpm SHA-256: c4f81e40a96678ac4368d7a6d66cc110e282c2fd8fdb881dea16025ee7ad9ef7 expat-devel-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: 733d5c0c6a5d9301e709cbb9e02d72481c12c2a64e6a72be35affae8a4781a2e Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM expat-2.5.0-6.el9_8.3.src.rpm SHA-256: 0cff2a2213384dc43eb1874bf6e77b2b8230be848f50387d8057e0e6cde3d392 x86_64 expat-2.5.0-6.el9_8.3.i686.rpm SHA-256: e1beabe0c0005fa61eba339f24dc8d207126d47959ec70687230165e85748296 expat-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: 3c9c96529f94f84fc19c8039d8852269e1085d16b5af2933f44ff286dec66a35 expat-debuginfo-2.5.0-6.el9_8.3.i686.rpm SHA-256: bfa16cd5df6a47a44f10465cdc0dc27dc43defa0438b0276165a3665cc158011 expat-debuginfo-2.5.0-6.el9_8.3.i686.rpm SHA-256: bfa16cd5df6a47a44f10465cdc0dc27dc43defa0438b0276165a3665cc158011 expat-debuginfo-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: e06ecd02742fa05b1cee92e23260837b68d70af0b7e256deb53afd1e87ba8b72 expat-debuginfo-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: e06ecd02742fa05b1cee92e23260837b68d70af0b7e256deb53afd1e87ba8b72 expat-debugsource-2.5.0-6.el9_8.3.i686.rpm SHA-256: 0adea3f3cb906e6ed6776cad894d8c38057085080ef6bee463469955d375ca55 expat-debugsource-2.5.0-6.el9_8.3.i686.rpm SHA-256: 0adea3f3cb906e6ed6776cad894d8c38057085080ef6bee463469955d375ca55 expat-debugsource-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: 721f62987696082e346dffa2d58e586eb1085a40efea9d69591e37813c5910e0 expat-debugsource-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: 721f62987696082e346dffa2d58e586eb1085a40efea9d69591e37813c5910e0 expat-devel-2.5.0-6.el9_8.3.i686.rpm SHA-256: c4f81e40a96678ac4368d7a6d66cc110e282c2fd8fdb881dea16025ee7ad9ef7 expat-devel-2.5.0-6.el9_8.3.x86_64.rpm SHA-256: 733d5c0c6a5d9301e709cbb9e02d72481c12c2a64e6a72be35affae8a4781a2e Red Hat Enterprise Linux for IBM z Systems 9 SRPM expat-2.5.0-6.el9_8.3.src.rpm SHA-256: 0cff2a2213384dc43eb1874bf6e77b2b8230be848f50387d8057e0e6cde3d392 s390x expat-2.5.0-6.el9_8.3.s390x.rpm SHA-256: e6bd000496dc070c1e4cfd17162d512111341820f12c10442b8752c0767c68a0 expat-debuginfo-2.5.0-6.el9_8.3.s390x.rpm SHA-256: 012a955291133331c69c8217f7da6a7956b28113bc52acee9ee54bf6fa54c6bf expat-debuginfo-2.5.0-6.el9_8.3.s390x.rpm SHA-256: 012a955291133331c69c8217f7da6a7956b28113bc52acee9ee54bf6fa54c6bf expat-debugsource-2.5.0-6.el9_8.3.s390x.rpm SHA-256: aba6186ad3c417886e0242921947c3251a3bd075b3d15cee6f3b85c950a91cfe expat-debugsource-2.5.0-6.el9_8.3.s390x.rpm SHA-256: aba6186ad3c417886e0242921947c3251a3bd075b3d15cee6f3b85c950a91cfe expat-devel-2.5.0-6.el9_8.3.s390x.rpm SHA-256: 36b73d42ab7a1b84cb50a1bb24b568222b2e8e2b5a2ee85a99364e772af2c274 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM expat-2.5.0-6.el9_8.3.src.rpm SHA-256: 0cff2a2213384dc43eb1874bf6e77b2b8230be848f50387d8057e0e6cde3d392 s390x expat-2.5.0-6.el9_8.3.s390x.rpm SHA-256: e6bd000496dc070c1e4cfd17162d512111341820f12c10442b8752c0767c68a0 expat-debuginfo-2.5.0-6.el9_8.3.s390x.rpm SHA-256: 012a955291133331c69c8217f7da6a7956b28113bc52acee9ee54bf6fa54c6bf expat-debuginfo-2.5.0-6.el9_8.3.s390x.rpm SHA-256: 012a955291133331c69c8217f7da6a7956b28113bc52acee9ee54bf6fa54c6bf expat-debugsource-2.5.0-6.el9_8.3.s390x.rpm SHA-256: aba6186ad3c417886e0242921947c3251a3bd075b3d15cee6f3b85c950a91cfe expat-debugsource-2.5.0-6.el9_8.3.s390x.rpm SHA-256: aba6186ad3c417886e0242921947c3251a3bd075b3d15cee6f3b85c950a91cfe expat-devel-2.5.0-6.el9_8.3.s390x.rpm SHA-256: 36b73d42ab7a1b84cb50a1bb24b568222b2e8e2b5a2ee85a99364e772af2c274 Red Hat Enterprise Linux for Power, little endian 9 SRPM expat-2.5.0-6.el9_8.3.src.rpm SHA-256: 0cff2a2213384dc43eb1874bf6e77b2b8230be848f50387d8057e0e6cde3d392 ppc64le expat-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: 731fb187d6550a4a5fc6227d43370464d67a68e9fb41481c2e86b95e4560345b expat-debuginfo-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: 56a1c41be6ffe1f0bada91f3ae22c80554827ba1ed7fe03eb46acdfeccb103a3 expat-debuginfo-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: 56a1c41be6ffe1f0bada91f3ae22c80554827ba1ed7fe03eb46acdfeccb103a3 expat-debugsource-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: a187e26a6db81bdf38bf7654e0a9040215fd0b59fe3474dc61494e8c93bbcff4 expat-debugsource-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: a187e26a6db81bdf38bf7654e0a9040215fd0b59fe3474dc61494e8c93bbcff4 expat-devel-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: 7e1204a2b7ddbb3e6eff06148d5d560b10f748c2579669d5b28cb84fb504e951 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM expat-2.5.0-6.el9_8.3.src.rpm SHA-256: 0cff2a2213384dc43eb1874bf6e77b2b8230be848f50387d8057e0e6cde3d392 ppc64le expat-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: 731fb187d6550a4a5fc6227d43370464d67a68e9fb41481c2e86b95e4560345b expat-debuginfo-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: 56a1c41be6ffe1f0bada91f3ae22c80554827ba1ed7fe03eb46acdfeccb103a3 expat-debuginfo-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: 56a1c41be6ffe1f0bada91f3ae22c80554827ba1ed7fe03eb46acdfeccb103a3 expat-debugsource-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: a187e26a6db81bdf38bf7654e0a9040215fd0b59fe3474dc61494e8c93bbcff4 expat-debugsource-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: a187e26a6db81bdf38bf7654e0a9040215fd0b59fe3474dc61494e8c93bbcff4 expat-devel-2.5.0-6.el9_8.3.ppc64le.rpm SHA-256: 7e1204a2b7ddbb3e6eff06148d5d560b10f748c2579669d5b28cb84fb504e951 Red Hat Enterprise Linux for ARM 64 9 SRPM expat-2.5.0-6.el9_8.3.src.rpm SHA-256: 0cff2a2213384dc43eb1874bf6e77b2b8230be848f50387d8057e0e6cde3d392 aarch64 expat-2.5.0-6.el9_8.3.aarch64.rpm SHA-256: df004398da989f75bae9267cfb0ad402ada6e6db46ebef0932c869894c013c08 expat-debuginfo-2.5.0-6.el9_8.3.aarch64.rpm SHA-256: a604777dd5d1526f6b0fe12f37612b33c26977779a120fbab26c54217f276670 expat-debuginfo-2.5.0-6.el9_8.3.aarch64.rpm SHA-256: a604777dd5d1526f6b0fe12f37612b33c26977779a120fbab26c54217f276670 expat-debugsource-2.5.