Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | cargo | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | clippy | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-analyzer | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-debugger-common | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-doc | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-gdb | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-lldb | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-src | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-std-static | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-std-static-aarch64-unknown-none-softfloat | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-std-static-aarch64-unknown-uefi | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-std-static-i686-pc-windows-gnu | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-std-static-wasm32-unknown-unknown | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-std-static-wasm32-wasip1 | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-std-static-x86_64-pc-windows-gnu | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-std-static-x86_64-unknown-none | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rust-std-static-x86_64-unknown-uefi | 0:1.97.0-1.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | rustfmt | 0:1.97.0-1.1.hum1 |
Vulnerabilities 2
-
High 8.7
linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop
linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the package's primary public API, has O(N²) algorithmic complexity for inputs containing many fuzzy links or emails because the JavaScript-level sc…
-
High 7.5
js-yaml: YAML merge-key chains can force quadratic CPU consumption
js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the…
References
-
article
https://images.redhat.com/
-
report
https://access.redhat.com/security/cve/CVE-2026-59869
-
article
https://access.redhat.com/security/updates/classification/
-
report
https://access.redhat.com/security/cve/CVE-2026-48801
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_38187.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2500656
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-48801
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-48801
-
article
https://github.com/markdown-it/linkify-it/commit/6be6d15e0641bf1daeaa977d500cabc743166159
-
article
https://github.com/markdown-it/linkify-it/security/advisories/GHSA-22p9-wv53-3rq4
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2498122
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-59869
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-59869
-
article
https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7
-
article
https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4
-
article
https://github.com/nodeca/js-yaml/releases/tag/3.15.0
-
article
https://github.com/nodeca/js-yaml/releases/tag/4.3.0
-
article
https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m