RLSA-2026:98509: Important: raptor2 security update
Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.
Security Fix(es):
raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/raptor2to a version that resolves this vulnerability.Fixed in 0:2.0.15-32.el9_9.1 - Upgrade
Upgrade
rocky-linux/raptor2-debuginfoto a version that resolves this vulnerability.Fixed in 0:2.0.15-32.el9_9.1 - Upgrade
Upgrade
rocky-linux/raptor2-debugsourceto a version that resolves this vulnerability.Fixed in 0:2.0.15-32.el9_9.1 - Upgrade
Upgrade
rocky-linux/raptor2-develto a version that resolves this vulnerability.Fixed in 0:2.0.15-32.el9_9.1
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates network reachability is required, no privileges or authentication are needed, and exploitation requires user interaction.
Which Rocky Linux packages are covered by this advisory?
The advisory covers raptor2, raptor2-debuginfo, raptor2-debugsource, and raptor2-devel.