ALSA-2026:94519: Important: raptor2 security update
Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.
Security Fix(es):
raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/raptor2to a version that resolves this vulnerability.Fixed in 2.0.15-18.el8_10 - Upgrade
Upgrade
almalinux/raptor2-develto a version that resolves this vulnerability.Fixed in 2.0.15-18.el8_10
Event History
Frequently Asked Questions
What input would need to be processed to trigger this issue?
An attacker would need to cause Raptor2 to parse RDF data containing a malicious language tag. The flaw is in language tag handling during RDF parsing.
What is the potential impact if exploitation succeeds?
Successful exploitation could allow arbitrary code execution through a heap-based buffer overflow.
Which Raptor2 configurations are affected?
The advisory does not identify specific affected versions, configurations, or whether default installations are affected.