Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 24

Vulnerabilities 4

• High 8.3
  CVE-2026-33210

  Ruby JSON has a format string injection vulnerability

  Ruby JSON is a JSON implementation for Ruby. From version 2.14.0 to before versions 2.15.2.1, 2.17.1.2, and 2.19.2, a format string injection vulnerability can lead to denial of service attacks or information disclosure, when the allow_duplicate_key: false pa…

  ruby json logstash-9.3-iamguarded-compat logstash-9.3 Debian Ubuntu Wolfi RubyGems
  Mar 20, 2026
• High 7.5
  CVE-2026-54876

  Client-Side Memory Leak in OCSP Response Checking

  Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memo…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Wolfi
  Aug 5, 2026
• High 7.5
  CVE-2026-80212

  An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Resolv::DNS::Resource…

  ruby resolv ruby ruby3.1 Debian Azure Linux Alpine Wolfi
  Aug 27, 2026
• Medium 4.0
  CVE-2026-80213

  An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length…

  ruby resolv ruby ruby3.1 Debian Azure Linux Alpine Wolfi
  Aug 27, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-33210
• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-54876
• report
  https://access.redhat.com/security/cve/CVE-2026-80213
• report
  https://access.redhat.com/security/cve/CVE-2026-80212
• article
  https://access.redhat.com/security/updates/classification/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57565.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2449871
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-33210
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-33210
• article
  https://github.com/ruby/json/security/advisories/GHSA-3m6g-2423-7cp3
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2511600
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-54876
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-54876
• article
  https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12
• article
  https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638
• article
  https://openssl-library.org/news/secadv/20260805.txt
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2525066
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-80212
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-80212
• article
  https://github.com/ruby/resolv/commit/6393c628b224d0234ef915813c0977e11ebe57ea
• article
  https://www.ruby-lang.org/en/news/2026/08/27/multiple-vulnerabilities-in-resolv/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2525014
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-80213
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-80213
• article
  https://github.com/ruby/resolv/commit/b336e42d6a3e2a824308f7b47fa26a968641b366