Skip to content
OpenAdvisories
Medium RHSA-2026:45341 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Jul 28, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 19

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 cargo 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 clippy 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-analyzer 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-debugger-common 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-doc 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-gdb 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-lldb 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-src 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-aarch64-unknown-none-softfloat 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-aarch64-unknown-uefi 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-i686-pc-windows-gnu 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-wasm32-unknown-unknown 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-wasm32-wasip1 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-x86_64-pc-windows-gnu 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-x86_64-unknown-none 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-x86_64-unknown-uefi 0:1.97.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 rustfmt 0:1.97.1-2.hum1

Vulnerabilities 2

  • Medium 6.3
    CVE-2025-11233

    Rust standard library didn't detect all path separators on Cygwin

    Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target (`x86_64-pc-cygwin`) didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled…

    Rust Project std rustc rustc-1.88 Debian Ubuntu
  • Medium 5.9
    CVE-2026-44216

    Wasmtime: Panic when allocating a table exceeding the size of the host's address space

    Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on overflow. This overflow is possible to trigger, and thus panic, when a table w…

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian Ubuntu Wolfi crates.io

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-44216
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2025-11233
  • article
    https://access.redhat.com/security/cve/CVE-2026-51540
  • article
    https://access.redhat.com/security/cve/CVE-2026-51536
  • article
    https://access.redhat.com/security/cve/CVE-2026-51538
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_45341.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2400867
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-11233
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-11233
  • article
    https://github.com/rust-lang/rust/pull/141864
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2477467
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44216
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44216
  • article
    https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-p8xm-42r7-89xg