Red Hat Security AdvisoryRHSA-2026:68717
Red Hat Hardened Images RPMs Security Update
Released 2026-09-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images helm3-3.22.0-0.2.hum1@aarch64, helm3-3.22.0-0.2.hum1@src, helm3-3.22.0-0.2.hum1@x86_64
Fixes 5 records
Priority HIGH 77
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01318 · Published 2026-09-17 · Partial fix · 0.27.1 CWE-674
Priority MEDIUM 61
OpenTelemetry-Go is the Go implementation of OpenTelemetry.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00383 · Published 2026-09-16 · Partial fix · 0.21.0 CWE-400
Priority MEDIUM 40
compress provides various compression algorithms.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00572 · Published 2026-09-29 · Partial fix · 1.18.7 CWE-190
Priority LOW 39
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00466 · Published 2026-10-07 · Partial fix · 0.41.0 CWE-787
Priority LOW 27
OpenTelemetry-Go is the Go implementation of OpenTelemetry.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00196 · Published 2026-09-16 · Partial fix · 0.21.0 CWE-295
