RHSA-2026:94519: Important: raptor2 security update

Q: Which packages are in scope for this update?

The advisory lists redhat/raptor2, redhat/raptor2-debuginfo, redhat/raptor2-debugsource, and redhat/raptor2-devel. Systems with the Raptor RDF parsing toolkit installed should review these packages.

Q: What type of workload is relevant to exploitation?

The affected toolkit parses RDF/XML and N-Triples and is vulnerable in language tag handling. Environments that parse RDF input containing language tags are the relevant exposure area.

Q: How can I determine whether a system needs the update?

Check whether any of the listed raptor2 packages are installed. The provided advisory data does not include affected or fixed package versions, so version-based determination cannot be made from this information alone.

Published Nov 3, 2026

Updated

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fix(es): raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

16 affected componentsFixes available

redhat/raptor2<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2-debuginfo<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2-debuginfo<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2-debugsource<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2-debugsource<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2-debuginfo<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2-debugsource<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2<2.0.15-18.el8_10.aa

2.0.15-18.el8_10.aa

redhat/raptor2-debuginfo<2.0.15-18.el8_10.aa

2.0.15-18.el8_10.aa

redhat/raptor2-debugsource<2.0.15-18.el8_10.aa

2.0.15-18.el8_10.aa

redhat/raptor2-devel<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2-devel<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2-devel<2.0.15-18.el8_10

2.0.15-18.el8_10

redhat/raptor2-devel<2.0.15-18.el8_10.aa

2.0.15-18.el8_10.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/raptor2 to a version that resolves this vulnerability.
Fixed in 2.0.15-18.el8_10
Upgrade
Upgrade redhat/raptor2-debuginfo to a version that resolves this vulnerability.
Fixed in 2.0.15-18.el8_10
Upgrade
Upgrade redhat/raptor2-debugsource to a version that resolves this vulnerability.
Fixed in 2.0.15-18.el8_10
Upgrade
Upgrade redhat/raptor2 to a version that resolves this vulnerability.
Fixed in 2.0.15-18.el8_10.aa
Upgrade
Upgrade redhat/raptor2-debuginfo to a version that resolves this vulnerability.
Fixed in 2.0.15-18.el8_10.aa
Upgrade
Upgrade redhat/raptor2-debugsource to a version that resolves this vulnerability.
Fixed in 2.0.15-18.el8_10.aa
Upgrade
Upgrade redhat/raptor2-devel to a version that resolves this vulnerability.
Fixed in 2.0.15-18.el8_10
Upgrade
Upgrade redhat/raptor2-devel to a version that resolves this vulnerability.
Fixed in 2.0.15-18.el8_10.aa

Event History

Nov 3, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

Which packages are in scope for this update?

The advisory lists redhat/raptor2, redhat/raptor2-debuginfo, redhat/raptor2-debugsource, and redhat/raptor2-devel. Systems with the Raptor RDF parsing toolkit installed should review these packages.

What type of workload is relevant to exploitation?

The affected toolkit parses RDF/XML and N-Triples and is vulnerable in language tag handling. Environments that parse RDF input containing language tags are the relevant exposure area.

How can I determine whether a system needs the update?

Check whether any of the listed raptor2 packages are installed. The provided advisory data does not include affected or fixed package versions, so version-based determination cannot be made from this information alone.

RHSA-2026:94519: Important: raptor2 security update

Affected Software

Remediation

Event History

Frequently Asked Questions

Which packages are in scope for this update?

What type of workload is relevant to exploitation?

How can I determine whether a system needs the update?

Company

Resources

Contact

Frequently Asked Questions

Which packages are in scope for this update?

What type of workload is relevant to exploitation?

How can I determine whether a system needs the update?