Skip to content
OpenAdvisories
Medium RHSA-2026:46515 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 28, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 coreutils 0:9.11-5.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 coreutils-common 0:9.11-5.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 coreutils-single 0:9.11-5.1.hum1

Vulnerabilities 1

  • Medium 4.6
    CVE-2026-56391

    Out‑of‑bounds Read in GNU coreutils

    GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer i…

    GNU coreutils coreutils coreutils Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-56391
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46515.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2506691
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-56391
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-56391
  • article
    https://cert.pl/en/posts/2026/07/CVE-2026-56391
  • article
    https://git.savannah.gnu.org/cgit/coreutils.git/
  • article
    https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371