This security advisory from Red Hat addresses vulnerabilities in the expat library included in Red Hat Hardened Images RPMs. The update provides fixed versions of expat packages (expat-2.8.2-1.hum1 and related packages) for aarch64 and x86_64 architectures. The primary vulnerability fixed is CVE-2026-50219, with an additional CVE (CVE-2026-56132) noted but not detailed. The advisory does not specify affected versions or CVSS metrics. No exploits are currently known in the wild. The update is available via Red Hat's hardened images repository.

The vulnerabilities affect the expat XML parsing library used in Red Hat Hardened Images RPMs. While the exact impact details are not provided, the medium severity suggests potential moderate risk if exploited. No known active exploitation has been reported. The vulnerabilities could potentially affect applications relying on expat for XML parsing within the hardened images environment.

Red Hat has released updated expat packages (version 2.8.2-1.hum1) as part of the Hardened Images RPMs to address CVE-2026-50219. Users should apply these updates by upgrading to the provided package versions from Red Hat's hardened images repository. Since this is an official fix, applying the update fully mitigates the vulnerability. No additional mitigation steps are indicated by the vendor advisory.