RHSA-2026:98509: Important: raptor2 security update
Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fix(es): raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/raptor2to a version that resolves this vulnerability.Fixed in 2.0.15-32.el9_9.1 - Upgrade
Upgrade
redhat/raptor2-debuginfoto a version that resolves this vulnerability.Fixed in 2.0.15-32.el9_9.1 - Upgrade
Upgrade
redhat/raptor2-debugsourceto a version that resolves this vulnerability.Fixed in 2.0.15-32.el9_9.1 - Upgrade
Upgrade
redhat/raptor2to a version that resolves this vulnerability.Fixed in 2.0.15-32.el9_9.1.aa - Upgrade
Upgrade
redhat/raptor2-debuginfoto a version that resolves this vulnerability.Fixed in 2.0.15-32.el9_9.1.aa - Upgrade
Upgrade
redhat/raptor2-debugsourceto a version that resolves this vulnerability.Fixed in 2.0.15-32.el9_9.1.aa - Upgrade
Upgrade
redhat/raptor2-develto a version that resolves this vulnerability.Fixed in 2.0.15-32.el9_9.1 - Upgrade
Upgrade
redhat/raptor2-develto a version that resolves this vulnerability.Fixed in 2.0.15-32.el9_9.1.aa
Event History
Frequently Asked Questions
Which installed packages should be reviewed for this update?
Review systems with redhat/raptor2 installed. The advisory also lists redhat/raptor2-debuginfo, redhat/raptor2-debugsource, and redhat/raptor2-devel as affected software packages.
What is the potential impact of exploiting this issue?
The issue is a heap-based buffer overflow in language tag handling that can lead to arbitrary code execution.
What weakness category is involved?
The advisory classifies the issue as a buffer overflow.