Red Hat Security Advisory

RHSA-2026:15862

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-05-09 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Hardened Images trivy-0.69.3-1.2.hum1@aarch64, trivy-0.69.3-1.2.hum1@src, trivy-0.69.3-1.2.hum1@x86_64

TI-2026-33087 CVE-2026-45287 · GHSA-995v-fvrw-c78m

MEDIUM 44

OpenTelemetry-Go is the Go implementation of OpenTelemetry.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00168 Published 2026-06-04 Partial fix · 0.0.17 CWE-772

TI-2026-32373 CVE-2026-44432 · GHSA-mf9v-mfxr-j63j

MEDIUM 40

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.0068 Published 2026-05-13 Partial fix · 2.7.0 CWE-409

TI-2026-29554 CVE-2026-40898 · GHSA-vvgj-x9jq-8cj9

LOW 39

quic-go is an implementation of the QUIC protocol in Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00396 Published 2026-06-04 Partial fix · 0.59.1 CWE-770

TI-2026-38569 CVE-2026-53492 · GHSA-33vj-92qq-66hc

LOW 36

containerd is an open-source container runtime.

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.00353 Published 2026-07-01 Partial fix · 2.1.9, 2.2.5 +1 CWE-20

TI-2026-38568 CVE-2026-53489 · GHSA-rgh6-rfwx-v388

LOW 35

containerd is an open-source container runtime.

CVSS 4.0HIGH 8.2 Local No auth No interaction EPSS 0.00174 Published 2026-07-01 Partial fix · 2.1.9, 2.2.5 +1 CWE-61