RHSA-2026:99116HighCVSS 7.1

Red Hat Security Advisory: raptor2 security update

Published
November 12, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (1)

CVE-2025-71436 →

📋 Description

CVE-2025-71436 — raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling

🎯 Affected products33

  • Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-0:2.0.15-32.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-0:2.0.15-32.el9_8.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-0:2.0.15-32.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-0:2.0.15-32.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-0:2.0.15-32.el9_8.1.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-0:2.0.15-32.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debuginfo-0:2.0.15-32.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.8)
  • raptor2-debugsource-0:2.0.15-32.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-devel-0:2.0.15-32.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • raptor2-devel-0:2.0.15-32.el9_8.1.i686 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v.9.8)
  • +3 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: To reduce exposure on affected systems, prevent applications using raptor2 from processing RDF documents from untrusted sources. Where applicable, temporarily disable automated RDF imports or restrict access to RDF ingestion interfaces to trusted users and data sources. These measures are effective only if they prevent attacker-controlled RDF data from reaching the affected parser.

🔗 References (4)