Red Hat Hardened Images RPMs: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 7.5
  CVE-2026-33813

  Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image

  Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

  golang.org/x/image golang.org/x/image/webp kubescape rclone Debian Ubuntu Alpine Wolfi Go
  Apr 21, 2026
• Medium 6.5
  CVE-2026-2950

  lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`

  The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows deletion of properties…

  lodash lodash lodash-amd lodash-es Debian Ubuntu Wolfi npm
  Mar 31, 2026
• Medium 5.1
  CVE-2026-42371

  uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in…

  uriparser uriparser php85 uriparser Debian Ubuntu Azure Linux Alpine
  Apr 27, 2026
• Medium 4.0
  CVE-2026-2625

  Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification

  A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (RPM) file. During the RPM signature verification process, this crafted file can trigger an error in the OpenPGP signatur…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Hardened Images Linux Debian Ubuntu Alpine
  Apr 3, 2026

Revision history

1. 2026-11-03 #12

   Neue Updates von Red Hat aufgenommen

2. 2026-07-01 #11

   Neue Updates von Debian und Red Hat aufgenommen

3. 2026-06-08 #10

   Neue Updates von Red Hat aufgenommen

4. 2026-06-07 #9

   Neue Updates von IBM aufgenommen

5. 2026-06-01 #8

   Neue Updates von IBM und Red Hat aufgenommen

6. 2026-05-28 #7

   Neue Updates von Red Hat aufgenommen

7. 2026-05-17 #6

   Neue Updates von IBM aufgenommen

8. 2026-05-11 #5

   Neue Updates von Fedora aufgenommen

9. 2026-05-10 #4

   Neue Updates von HCL aufgenommen

10. 2026-05-06 #3

    Neue Updates von openSUSE aufgenommen

11. 2026-05-05 #2

    Neue Updates von Fedora aufgenommen

12. 2026-05-03 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:12430 vom 2026-05-03
  https://access.redhat.com/errata/RHSA-2026:12430
• Red Hat Security Advisory RHSA-2026:12682 vom 2026-05-03
  https://access.redhat.com/errata/RHSA-2026:12682
• Red Hat Security Advisory RHSA-2026:7655 vom 2026-05-03
  https://access.redhat.com/errata/RHSA-2026:7655
• Red Hat Security Advisory RHSA-2026:8291 vom 2026-05-03
  https://access.redhat.com/errata/RHSA-2026:8291
• NIST CVE-2026-33813 vom 2026-05-03
  https://nvd.nist.gov/vuln/detail/CVE-2026-33813
• Red Hat Security Advisory RHSA-2026:7378 vom 2026-05-04
  https://access.redhat.com/errata/RHSA-2026:7378
• Fedora Security Advisory FEDORA-2026-C66EAAE759 vom 2026-05-06
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-c66eaae759
• openSUSE Security Update OPENSUSE-SU-2026:10682-1 vom 2026-05-06
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XLRSQ4ZEPLCSV4ZOWTAQ6SMT4FCRCX66/
• Debian Security Advisory DLA-4663 vom 2026-07-02
  https://lists.debian.org/debian-lts-announce/2026/07/msg00004.html
• Red Hat Security Advisory RHSA-2026:34364 vom 2026-07-01
  https://access.redhat.com/errata/RHSA-2026:34364
• HCL Security Bulletin
  https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130587
• Fedora Security Advisory FEDORA-2026-8DF732BE8A vom 2026-05-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-8df732be8a
• IBM Security Bulletin 7273145 vom 2026-05-15
  https://www.ibm.com/support/pages/node/7273145
• Red Hat Security Advisory RHSA-2026:21769 vom 2026-05-28
  https://access.redhat.com/errata/RHSA-2026:21769
• IBM Security Bulletin 7274746 vom 2026-06-01
  https://www.ibm.com/support/pages/node/7274746
• Red Hat Security Advisory RHSA-2026:22347 vom 2026-06-02
  https://access.redhat.com/errata/RHSA-2026:22347
• IBM Security Bulletin 7275270 vom 2026-06-05
  https://www.ibm.com/support/pages/node/7275270
• Red Hat Security Advisory RHSA-2026:24503 vom 2026-06-08
  https://access.redhat.com/errata/RHSA-2026:24503
• Red Hat Security Advisory RHSA-2026:94791 vom 2026-11-04
  https://access.redhat.com/errata/RHSA-2026:94791