RHSA-2026:94519HighCVSS 7.1

Red Hat Security Advisory: raptor2 security update

Published
November 3, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (1)

CVE-2025-71436 →

📋 Description

CVE-2025-71436 — raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling

🎯 Affected products33

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-0:2.0.15-18.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-0:2.0.15-18.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-0:2.0.15-18.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-0:2.0.15-18.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-0:2.0.15-18.el8_10.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-0:2.0.15-18.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debuginfo-0:2.0.15-18.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • raptor2-debugsource-0:2.0.15-18.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-devel-0:2.0.15-18.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • raptor2-devel-0:2.0.15-18.el8_10.i686 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • +3 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To reduce exposure on affected systems, prevent applications using raptor2 from processing RDF documents from untrusted sources. Where applicable, temporarily disable automated RDF imports or restrict access to RDF ingestion interfaces to trusted users and data sources. These measures are effective only if they prevent attacker-controlled RDF data from reaching the affected parser.

🔗 References (4)