Skip to content
OpenAdvisories
Low RHSA-2026:15856 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published May 20, 2026 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 go-fdo-server 0:1.0.1-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 go-fdo-server-manufacturer 0:1.0.1-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 go-fdo-server-owner 0:1.0.1-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 go-fdo-server-rendezvous 0:1.0.1-0.2.hum1

Vulnerabilities 1

  • Low 2.3
    CVE-2026-41889

    pgx: SQL Injection via placeholder confusion with dollar quoted string literals

    pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be inte…

    jackc pgx kots k3s Debian Ubuntu Azure Linux Wolfi Go

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-41889
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_15856.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2468307
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-41889
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-41889
  • article
    https://github.com/jackc/pgx/commit/60644f84918a8af66d14a4b0d865d4edafd955da
  • article
    https://github.com/jackc/pgx/releases/tag/v5.9.2
  • article
    https://github.com/jackc/pgx/security/advisories/GHSA-j88v-2chj-qfwx