Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Red Hat Hardened Images RPMs Security Fix Needed
published 3 months ago
Summary
Red Hat Hardened Images RPMs have security fixes and enhancements. This means that if you're using these images, you should update them to get the latest security patches and improvements. You can do this by checking for and applying any available updates.
What to do
- Update redhat nodejs24 to version 0:24.18.1-0.1.hum1.
- Update redhat nodejs24-bin to version 0:24.18.1-0.1.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | nodejs24 |
< 0:24.18.1-0.1.hum1 Fix: upgrade to 0:24.18.1-0.1.hum1
|
| Red Hat:hummingbird:1 | redhat | nodejs24-bin |
< 0:24.18.1-0.1.hum1 Fix: upgrade to 0:24.18.1-0.1.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
References
- https://access.redhat.com/errata/RHSA-2026:48537 Vendor Advisory
- https://images.redhat.com/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-58043 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-56847 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-56850 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-58040 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-16729 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-13697 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-15157 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-14643 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-16728 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-58039 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48537.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2509179 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56850 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56850 Vendor Advisory
- https://nodejs.org/en/blog/vulnerability/july-2026-security-releases Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2508485 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-13697 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-13697 Vendor Advisory
- https://cna.openjsf.org/security-advisories.html Third Party Advisory
- https://github.com/nodejs/undici/security/advisories/GHSA-4cwx-7wf7-3272 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2508676 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-14643 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-14643 Vendor Advisory
- https://github.com/nodejs/undici/security/advisories/GHSA-jr45-8vmc-qm54 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2508677 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-15157 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-15157 Vendor Advisory
- https://github.com/nodejs/undici/security/advisories/GHSA-m8rv-5g2x-5cg5 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2508678 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-16728 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-16728 Vendor Advisory
- https://github.com/nodejs/undici/security/advisories/GHSA-8xcm-r25x-g524 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2508506 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-16729 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-16729 Vendor Advisory
- https://github.com/nodejs/undici/security/advisories/GHSA-v3r7-h72x-cjcm Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2509653 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-58039 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-58039 Vendor Advisory
- https://nodejs.org/en/blog/vulnerability Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2509175 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-58040 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-58040 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56846 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2510856 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56846 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56846 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2509171 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-58043 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-58043 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
7.5
High
Timeline
Published31 Jul 2026
Updated9 Aug 2026
First seen31 Jul 2026
Sources
RHSA-2026:48537 · OSV
Track software like this
Free during beta