Red Hat issued a security advisory (RHSA-2026:30647) for Red Hat Hardened Images RPMs that updates the expat library packages (expat, expat-devel, expat-static) to version 2.8.2-1.hum1 for aarch64 and x86_64 architectures. This update addresses two vulnerabilities identified as CVE-2026-50219 and CVE-2026-56132. The advisory does not provide CVSS scores or detailed technical exploit information. The update is available through Red Hat's public repositories. No exploits are currently known to be active in the wild.

The vulnerabilities affect the expat XML parsing library included in Red Hat Hardened Images RPMs. The exact impact is not detailed beyond the medium severity rating. There are no known exploits in the wild, indicating limited or no active exploitation at this time.

Red Hat has released updated expat packages (version 2.8.2-1.hum1) that address these vulnerabilities. Users of Red Hat Hardened Images should apply these updates as provided by Red Hat. Since this is an official security advisory with available updates, applying the vendor-provided patches is the recommended mitigation. Patch status is confirmed by the vendor advisory.