Skip to content
OpenAdvisories
High RHSA-2026:60368 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Sep 22, 2026 · Updated Sep 22, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 bubblewrap 0:0.12.0-1.hum1

Vulnerabilities 1

  • High 8.7
    CVE-2026-41163

    bubblewrap vulnerable to privilege escalation in setuid mode via ptrace

    bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. …

    containers bubblewrap bubblewrap bubblewrap Debian Ubuntu

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-41163
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60368.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2468439
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-41163
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-41163
  • article
    https://github.com/containers/bubblewrap/releases/tag/v0.11.2
  • article
    https://github.com/containers/bubblewrap/security/advisories/GHSA-xq78-7hw4-5jvp