Back to Security Advisories

Raptor2 Security Update — AlmaLinux 8 (ALSA-2026:94519)

ALSA-2026:94519 updates raptor2 on AlmaLinux 8, fixing CVE-2025-71436 — arbitrary code execution in the RDF parser toolkit (RDF/XML and N-Triples parsing). Update with dnf update raptor2 and restart any services linking the library.

High 7.1 CVSS
AlmaLinux 8

What this means under a SharedLicense license

RDF parsers process structured metadata from untrusted sources — code execution in the parser turns a crafted metadata file into attacker code in the parsing application.

Type:

security

Severity:

important

Release date:

2026-11-04

Description:

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.

Security Fix(es):

* raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture Package Checksum
aarch64 raptor2-devel-2.0.15-18.el8_10.aarch64.rpm 4b6a1c08b07406ba1d8c02a563e2014b5be373ac23325a7a10ccd72ee221e8f8
aarch64 raptor2-2.0.15-18.el8_10.aarch64.rpm 8d58eb3e13458f7688938cad959147a3c8dfe2c926f3f25157ab6799f30b78b8
i686 raptor2-devel-2.0.15-18.el8_10.i686.rpm 9e6e0d76ac1d963fc46abf149ceb3b7b6b059eb9e4ab5d187d1d1bc5c1e0d3e9
i686 raptor2-2.0.15-18.el8_10.i686.rpm abe82a3db2e7507672f801c0992cce4183eb3e1e9b0d5de7ce0c75c0077c938f
ppc64le raptor2-devel-2.0.15-18.el8_10.ppc64le.rpm 0b917a8f49c6a9e5a0128022946feb096e806500754f9c311b472c442386cde4
ppc64le raptor2-2.0.15-18.el8_10.ppc64le.rpm a1f8231935560ee761980129a6436b56907ae0fe30c139cac35a5130565d1e0f
s390x raptor2-devel-2.0.15-18.el8_10.s390x.rpm 0f31ca41f01a78ebc3b08ff9b8dff2f0828a8bd220122098e3652d4485d71dbb
s390x raptor2-2.0.15-18.el8_10.s390x.rpm e5ac9a7bcde2dd31daacc775fba404faf9a85938e57a8a4f7d264d1188467ef6
x86_64 raptor2-devel-2.0.15-18.el8_10.x86_64.rpm 560a55af8badf83d8bd66f4c6ad3adc0637a0110b4df9752762b34600e216a09
x86_64 raptor2-2.0.15-18.el8_10.x86_64.rpm e5daf379c72cc04292953fe3ee33c07c072ed95bc0f48a9641dea18e3ac337ac

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

Frequently Asked Questions

What is CVE-2025-71436?
It is an arbitrary code execution vulnerability in raptor2, the Redland RDF parser toolkit (RDF/XML and N-Triples formats), fixed in the AlmaLinux 8 update ALSA-2026:94519.
Who is affected?
Systems with raptor2 installed where RDF data gets parsed — semantic-web applications, metadata processors and anything linking the Redland libraries.
How do I apply the fix?
Run dnf update raptor2 and restart applications that link the library so they reload the patched code.
Is raptor2 common on hosting servers?
Not commonly — it usually arrives as a dependency of semantic-web or metadata tooling. If installed, update it; if the erratum query shows nothing, it was pulled in by another package you can likely remove.

References

Security Advisories

Related Advisories

Qt5-Qtdeclarative Security Update — AlmaLinux 8 (ALSA-2026:96075)

2026-11-10

Webkit2gtk3 Security Update — AlmaLinux 8 (ALSA-2026:96080)

2026-11-09

Util-Linux Security Update — AlmaLinux 8 (ALSA-2026:96212)

2026-11-09

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System