Skip to content
OpenAdvisories
Medium RHSA-2026:20075 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Jul 16, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 libusb1 0:1.0.30-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libusb1-devel 0:1.0.30-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libusb1-devel-doc 0:1.0.30-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 libusb1-tests-examples 0:1.0.30-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mingw32-libusb1 0:1.0.30-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 mingw64-libusb1 0:1.0.30-1.hum1

Vulnerabilities 2

  • Medium 6.2
    CVE-2026-23679

    libusb < 1.0.30 NULL Pointer Dereference in parse_interface()

    libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a cla…

    libusb libusb gpsbabel libusb-1.0 Debian Azure Linux PyPI
  • Medium 4.0
    CVE-2026-47104

    libusb < 1.0.30 Out-of-Bounds Read in parse_iad_array()

    libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing th…

    libusb libusb gpsbabel libusb1 Debian Azure Linux PyPI

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-23679
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-47104
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20075.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482102
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-23679
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-23679
  • article
    https://github.com/libusb/libusb/commit/578ab76b4c434f8b204137ab6d7310689c7a9704
  • article
    https://github.com/libusb/libusb/issues/1813
  • article
    https://github.com/libusb/libusb/pull/1814
  • article
    https://github.com/libusb/libusb/releases/tag/v1.0.30
  • article
    https://www.vulncheck.com/advisories/libusb-null-pointer-dereference-in-parse-interface
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2482070
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-47104
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-47104
  • article
    https://www.vulncheck.com/advisories/libusb-out-of-bounds-read-in-parse-iad-array