Skip to content
OpenAdvisories
Medium RHSA-2026:50070 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Aug 5, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 prometheus3.5 0:3.5.5-0.7.hum1

Vulnerabilities 1

  • Medium 6.3
    CVE-2026-69153

    PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

    PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile() to read an unintended source-map file by suppl…

    postcss postcss langfuse-3-worker renovate Debian Ubuntu Wolfi npm

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-69153
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50070.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510719
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-69153
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-69153
  • article
    https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8
  • article
    https://github.com/postcss/postcss/releases/tag/8.5.19
  • article
    https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp