Skip to content
OpenAdvisories
High RHSA-2026:9113 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 22, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 ngtcp2 0:1.22.1-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ngtcp2-crypto-gnutls 0:1.22.1-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ngtcp2-crypto-gnutls-devel 0:1.22.1-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ngtcp2-crypto-ossl 0:1.22.1-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ngtcp2-crypto-ossl-devel 0:1.22.1-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ngtcp2-devel 0:1.22.1-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 ngtcp2-doc 0:1.22.1-1.hum1

Vulnerabilities 1

  • High 7.5
    CVE-2026-40170

    ngtcp2 has a qlog transport parameter serialization stack buffer overflow

    ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote…

    ngtcp2 ngtcp2 ngtcp2 ngtcp2 Debian Ubuntu Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-40170
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9113.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2459061
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-40170
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-40170
  • article
    https://github.com/ngtcp2/ngtcp2/commit/708a7640c1f48fb8ffb540c4b8ea5b4c1dfb8ee5
  • article
    https://github.com/ngtcp2/ngtcp2/security/advisories/GHSA-f523-465f-8c8f