Skip to content
OpenAdvisories
Critical RHSA-2026:35111 8 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 3, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 trivy 0:0.72.0-0.1.hum1

Vulnerabilities 8

  • Critical 9.4
    CVE-2026-53488

    containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

    containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a container without validation. This may result in executin…

    containerd containerd zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 7.5
    CVE-2026-32285

    Denial of service in github.com/buger/jsonparser

    The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

    github.com/buger/jsonparser github.com/buger/jsonparser k3s k3s-static Debian Ubuntu Wolfi Go
  • High 7.5
    CVE-2026-48702

    Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic

    Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the `Package.Unmarshal()` function in `pkg/types/alpine/apk.go` decompresses the signature and control gzip members of an APK file into in-memory buffers …

    sigstore rekor kubescape zarf Debian Ubuntu Wolfi Go
  • High 7.3
    CVE-2026-46680 Public exploit

    containerd user ID handling bypass allows runAsNonRoot evasion

    containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot eva…

    containerd containerd zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.5
    CVE-2026-44740

    go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

    Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or excessive resource consumptio…

    go-git go-billy scorecard kyverno-cli-1.17 Debian Ubuntu Wolfi Go
  • Medium 5.6
    CVE-2026-50195

    containerd: CRI checkpoint import allows local image tag poisoning

    containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the image references specified within a checkpoint image's configuration. An attac…

    containerd containerd zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 5.3
    CVE-2026-47262

    containerd image-triggered runtime DoS via unbounded group parsing

    containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, …

    containerd containerd zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 4.7
    CVE-2026-41506

    go-git Credential leak via cross-host redirect in smart HTTP transport

    go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. This issue has been patch…

    go-git go-git zot kubescape Debian Ubuntu Wolfi Go

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-46680
  • report
    https://access.redhat.com/security/cve/CVE-2026-47262
  • report
    https://access.redhat.com/security/cve/CVE-2026-53488
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-50195
  • report
    https://access.redhat.com/security/cve/CVE-2026-32285
  • report
    https://access.redhat.com/security/cve/CVE-2026-44740
  • report
    https://access.redhat.com/security/cve/CVE-2026-41506
  • report
    https://access.redhat.com/security/cve/CVE-2026-48702
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35111.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2451846
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-32285
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-32285
  • article
    https://github.com/buger/jsonparser/issues/275
  • article
    https://github.com/golang/vulndb/issues/4514
  • advisory
    https://pkg.go.dev/vuln/GO-2026-4514
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2468126
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-41506
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-41506
  • article
    https://github.com/go-git/go-git/releases/tag/v5.18.0
  • article
    https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.2
  • article
    https://github.com/go-git/go-git/security/advisories/GHSA-3xc5-wrhm-f963
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2483894
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44740
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44740
  • article
    https://github.com/go-git/go-billy/releases/tag/v5.9.0
  • article
    https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1
  • article
    https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2496104
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-46680
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-46680
  • article
    https://github.com/containerd/containerd/security/advisories/GHSA-fqw6-gf59-qr4w
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2496126
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-47262
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-47262
  • article
    https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2499685
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-48702