Red Hat Security Advisory

RHSA-2026:10999

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-04-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images python3-ruff-0.15.11-1.hum1@noarch@public-hummingbird-aarch64-rpms, python3-ruff-0.15.11-1.hum1@noarch@public-hummingbird-x86_64-rpms, ruff-0.15.11-1.hum1@aarch64 +2

TI-2026-34986 CVE-2026-47423 · GHSA-87xg-pxx2-7hvx

HIGH 69

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.0041 Published 2026-07-14 Partial fix · 3.4.5 CWE-79

TI-2026-32066 CVE-2026-44028 · GHSA-jggj-j5fq-x969

LOW 34

An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2.

CVSS 3.1HIGH 7.5 Local Low privileges No interaction EPSS 0.0018 Published 2026-05-05 Fixed in 2.28.7, 2.29.4 +8 CWE-674

TI-2026-32067 CVE-2026-44029 · GHSA-54vc-ph3h-x39x

LOW 31

An issue was discovered in Nix before 2.34.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00573 Published 2026-05-05 Fixed in 2.28.7, 2.29.4 +5 CWE-36