Skip to content
OpenAdvisories
Low RHSA-2026:35998 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Jul 10, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 39

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 erlang27 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-asn1 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-common_test 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-compiler 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-crypto 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-debugger 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-dialyzer 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-diameter 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-edoc 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-eldap 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-erl_interface 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-erts 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-et 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-eunit 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-examples 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-ftp 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-gdb-tools 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-inets 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-jinterface 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-kernel 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-megaco 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-mnesia 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-observer 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-odbc 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-os_mon 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-parsetools 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-public_key 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-reltool 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-runtime_tools 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-sasl 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-snmp 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-ssh 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-ssl 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-stdlib 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-syntax_tools 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-tftp 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-tools 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-wx 0:27.3.4.14-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-xmerl 0:27.3.4.14-1.hum1

Vulnerabilities 1

  • Low 2.3
    CVE-2026-53422

    SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root

    Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory. The SSH_FXP_REALPATH handler in ssh_sftpd calls rel…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-53422
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35998.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2496622
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-53422
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-53422
  • article
    https://cna.erlef.org/cves/CVE-2026-53422.html
  • article
    https://github.com/erlang/otp/commit/059e5785ef8c1d423820ca633fb7b37f47645172
  • article
    https://github.com/erlang/otp/commit/86622cfaacf57a02c7645d1999f946846b504c94
  • article
    https://github.com/erlang/otp/commit/c5a8f50ae68888ff243c5c741a06d2b3a4b48b7a
  • article
    https://github.com/erlang/otp/security/advisories/GHSA-h9pw-h5w4-h976
  • article
    https://osv.dev/vulnerability/EEF-CVE-2026-53422
  • article
    https://www.erlang.org/doc/system/versions.html#order-of-versions