Red Hat Security Advisory

RHSA-2026:74948

Red Hat Hardened Images RPMs Security Update

Released 2026-10-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images opentofu1.12-1.12.7-0.1.hum1@aarch64, opentofu1.12-1.12.7-0.1.hum1@src, opentofu1.12-1.12.7-0.1.hum1@x86_64

TI-2026-69257 CVE-2026-56851 · GHSA-gx9w-9qq8-m485

LOW 39

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00466 Published 2026-10-07 Partial fix · 0.41.0 CWE-787

TI-2026-56485 CVE-2026-81871 · GHSA-w34q-cm8f-9c5x

LOW 27

OpenTelemetry-Go is the Go implementation of OpenTelemetry.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00196 Published 2026-09-16 Partial fix · 0.21.0 CWE-295