Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat popt packages could allow privilege escalation

published 8 days ago

Summary

The popt, popt-devel, and popt-static packages in Red Hat Hardened Images contain a flaw that could let a malicious user gain higher system privileges. This risk affects any system using these packages. Install the latest Red Hat update as soon as possible to close the gap.

What to do

Update redhat popt to version 0:1.19-11.2.hum1.
Update redhat popt-devel to version 0:1.19-11.2.hum1.
Update redhat popt-static to version 0:1.19-11.2.hum1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:hummingbird:1	redhat	popt	< 0:1.19-11.2.hum1 Fix: upgrade to 0:1.19-11.2.hum1
Red Hat:hummingbird:1	redhat	popt-devel	< 0:1.19-11.2.hum1 Fix: upgrade to 0:1.19-11.2.hum1
Red Hat:hummingbird:1	redhat	popt-static	< 0:1.19-11.2.hum1 Fix: upgrade to 0:1.19-11.2.hum1

Original advisory text

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:77932 Vendor Advisory
https://images.redhat.com/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-18839 Third Party Advisory
https://access.redhat.com/security/updates/classification/ Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77932.... Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2511010 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-18839 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-18839 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

2.2 Low

Timeline

Published10 Oct 2026

Updated10 Oct 2026

First seen10 Oct 2026

Sources

RHSA-2026:77932 · OSV

Track software like this

Free during beta