Red Hat Security Advisory

RHSA-2026:66076

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-09-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images cargo-1.98.1-1.hum1@aarch64, cargo-1.98.1-1.hum1@x86_64, clippy-1.98.1-1.hum1@aarch64 +36

TI-2026-63063 CVE-2026-93599 · GHSA-g42g-9vm4-7gfj

HIGH 77

rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00346 Published 2026-09-18 Partial fix · 0.103.13, 0.104.0-alpha.7 CWE-191