Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 2

Vulnerabilities 2

• High 7.5
  CVE-2026-44028

  An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser…

  NixOS Lix Project Nix Lix Debian Ubuntu
  May 5, 2026
• Medium 5.3
  CVE-2026-44029

  An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "…

  NixOS Nix nix nix Debian Ubuntu
  May 5, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-44029
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-44028
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7046.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2466635
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-44028
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-44028
• article
  https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in-lix-and-nix/77407
• article
  https://github.com/NixOS/nix/security/advisories/GHSA-vh5x-56v6-4368
• article
  https://www.openwall.com/lists/oss-security/2026/05/04/32
• article
  https://www.openwall.com/lists/oss-security/2026/05/04/33
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2466634
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-44029
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-44029
• article
  https://github.com/NixOS/nix/security/advisories/GHSA-gr92-w2r5-qw5p