Skip to content
OpenAdvisories
High RHSA-2026:42986 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Aug 9, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 dotnet-sdk-8.0 0:8.0.129-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 dotnet-sdk-8.0-source-built-artifacts 0:8.0.129-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 dotnet-sdk-dbg-8.0 0:8.0.129-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 dotnet-templates-8.0 0:8.0.129-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 dotnet8.0 0:8.0.129-2.hum1

Vulnerabilities 1

  • High 7.5
    CVE-2026-59725

    Socket.IO: Engine.IO Polling Transport Connection Exhaustion

    Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-…

    socketio engine.io jupyter-base-notebook engine.io Wolfi npm

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-59725
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42986.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2498118
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-59725
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-59725
  • article
    https://github.com/socketio/socket.io/commit/fc11285e14964c2132d122164bf130c355f60671
  • article
    https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7
  • article
    https://github.com/socketio/socket.io/security/advisories/GHSA-r635-g3xr-vw7x