# xmlstreambuffer security updates

Patch Radar has 10 security fixes for xmlstreambuffer, closing 43 CVEs, 2 of which are being exploited. The newest is RHSA-2026:90909 (0:1.5.4-8.module+el8.10.0+20993+d0f024b0), released October 29, 2026.

- Web page: https://patchblox.com/security/product/linux/xmlstreambuffer
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [RHSA-2026:90909](https://patchblox.com/security/data/fix/linux/rhsa-2026-90909.md) | Oct 29, 2026 | RHEL 8 0:1.5.4-8.module+el8.10.0+20993+d0f024b0 | High | 3 | 0 |
| [RHSA-2026:43218](https://patchblox.com/security/data/fix/linux/rhsa-2026-43218.md) | Jul 22, 2026 | RHEL 8 0:1.5.4-8.module+el8.10.0+20993+d0f024b0 | High | 1 | 0 |
| [RHSA-2025:14126](https://patchblox.com/security/data/fix/linux/rhsa-2025-14126.md) | Aug 20, 2025 | RHEL 8 0:1.5.4-8.module+el8.10.0+20993+d0f024b0 | High | 1 | 0 |
| [RHSA-2024:3061](https://patchblox.com/security/data/fix/linux/rhsa-2024-3061.md) | May 22, 2024 | RHEL 8 0:1.5.4-8.module+el8.10.0+20993+d0f024b0 | High | 1 | 0 |
| [RHSA-2021:1775](https://patchblox.com/security/data/fix/linux/rhsa-2021-1775.md) | May 18, 2021 | RHEL 8 0:1.5.4-8.module+el8.2.0+5723+4574fbff | High | 1 | 0 |
| [RHSA-2020:4847](https://patchblox.com/security/data/fix/linux/rhsa-2020-4847.md) | Nov 4, 2020 | RHEL 8 0:1.5.4-8.module+el8.2.0+5723+4574fbff | Patch now | 17 | 2 |
| [RHSA-2020:1644](https://patchblox.com/security/data/fix/linux/rhsa-2020-1644.md) | Apr 28, 2020 | RHEL 8 0:1.5.4-8.module+el8.1.0+3366+6dfb954c | High | 12 | 0 |
| [RHBA-2019:3416](https://patchblox.com/security/data/fix/linux/rhba-2019-3416.md) | Nov 5, 2019 | RHEL 8 0:1.5.4-8.module+el8.1.0+3366+6dfb954c | High | 2 | 0 |
| [RHSA-2019:2720](https://patchblox.com/security/data/fix/linux/rhsa-2019-2720.md) | Sep 12, 2019 | RHEL 8 0:1.5.4-8.module+el8.0.0+3892+c903d3f0 | High | 1 | 0 |
| [RHSA-2019:1529](https://patchblox.com/security/data/fix/linux/rhsa-2019-1529.md) | Jun 18, 2019 | RHEL 8 0:1.5.4-8.module+el8.0.0+3248+9d514f3b | High | 4 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo