Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 3

Vulnerabilities 2

• High 7.4
  CVE-2026-42784

  Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion

  A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the b…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat OpenShift Container Platform 4 Linux Debian Ubuntu Azure Linux
  Sep 16, 2026
• Medium 4.0
  CVE-2026-2625

  Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification

  A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (RPM) file. During the RPM signature verification process, this crafted file can trigger an error in the OpenPGP signatur…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Hardened Images Linux Debian Ubuntu Alpine
  Apr 3, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-2625
• report
  https://access.redhat.com/security/cve/CVE-2026-42784
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_94791.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2440357
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-2625
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-2625
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464122
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-42784
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-42784