Red Hat issued a security advisory (RHSA-2026:33840) for Red Hat Hardened Images RPMs to address CVE-2026-11979, a vulnerability in libxml2 packages affecting aarch64 and x86_64 architectures. The advisory lists updated RPMs including libxml2, libxml2-devel, libxml2-static, and python3-libxml2 at version 2.15.3-0.1.1.hum1. The vulnerability corresponds to CWE-120, which typically involves buffer overflow issues. The advisory does not explicitly state a fixed version or patch availability but provides updated package versions. No known exploits in the wild have been reported. The vendor advisory references Red Hat's update mechanisms and directs users to https://images.redhat.com/ for applying updates.

The vulnerability affects libxml2 packages used in Red Hat Hardened Images on aarch64 and x86_64 architectures. CWE-120 classification suggests a buffer overflow vulnerability that could potentially lead to memory corruption or execution of arbitrary code. The advisory rates the severity as high. However, no known exploits have been reported in the wild at this time.

Red Hat has released updated libxml2 RPM packages as part of the Hardened Images security update. Users should apply these updates by following the instructions at https://images.redhat.com/. Since this is an official Red Hat security advisory, applying the provided updates is the recommended remediation. Patch status is confirmed by the vendor advisory indicating updated package versions. No additional mitigation steps are specified or required beyond applying the update.