Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Hardened Images packages need security update

published 2 months ago

Summary

The Red Hat Hardened Images software includes several components that have known security weaknesses. If left unpatched, these weaknesses could let attackers gain unauthorized access or disrupt operations. Install the latest Red Hat update for these packages as soon as possible.

What to do

Update redhat libevent to version 0:2.1.12-19.1.hum1.
Update redhat libevent-doc to version 0:2.1.12-19.1.hum1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:hummingbird:1	redhat	libevent	< 0:2.1.12-19.1.hum1 Fix: upgrade to 0:2.1.12-19.1.hum1
Red Hat:hummingbird:1	redhat	libevent-doc	< 0:2.1.12-19.1.hum1 Fix: upgrade to 0:2.1.12-19.1.hum1

Original advisory text

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

References

https://access.redhat.com/errata/RHSA-2026:60853 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-63379 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-63381 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-63383 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-63384 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-63388 Third Party Advisory
https://access.redhat.com/security/updates/classification/ Third Party Advisory
https://images.redhat.com/ Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60853.... Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2520667 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-63379 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-63379 Vendor Advisory
https://github.com/libevent/libevent/commit/87e8e44fa774e9677b089b1a5114ee68aefa... Third Party Advisory
https://github.com/libevent/libevent/commit/b847071141b3827900d536594ec9045eb0a4... Third Party Advisory
https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable Third Party Advisory
https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha Third Party Advisory
https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2520657 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-63381 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-63381 Vendor Advisory
https://github.com/libevent/libevent/commit/5cb95ba2f804f8aff46f88d58391c71e1251... Third Party Advisory
https://github.com/libevent/libevent/commit/9db091b04f569be3a700fa9860ef02f90b83... Third Party Advisory
https://github.com/libevent/libevent/security/advisories/GHSA-c2pj-cg4r-88c8 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2520654 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-63383 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-63383 Vendor Advisory
https://github.com/libevent/libevent/commit/91ed8745eebabdd27592a83d350338a8c462... Third Party Advisory
https://github.com/libevent/libevent/commit/e1f9e21887c6b104e206a718385ba3ffc751... Third Party Advisory
https://github.com/libevent/libevent/security/advisories/GHSA-fj29-64w6-73h6 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2520658 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-63384 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-63384 Vendor Advisory
https://github.com/libevent/libevent/commit/109c16499282959d70f56ec3baf4c8b1e664... Third Party Advisory
https://github.com/libevent/libevent/commit/5e3c6ebe342b34c5a9bcf48e9a32ad6708b9... Third Party Advisory
https://github.com/libevent/libevent/security/advisories/GHSA-45c6-qx49-89m8 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2520661 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-63388 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-63388 Vendor Advisory
https://github.com/libevent/libevent/commit/52057cb33d0c20c0a0453fbabe6c0c968549... Third Party Advisory
https://github.com/libevent/libevent/commit/ef38f926e9cd1f082416c6fff13587bc1f43... Third Party Advisory
https://github.com/libevent/libevent/security/advisories/GHSA-cvq5-vrvr-j338 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.4 High

Timeline

Published30 Aug 2026

Updated30 Aug 2026

First seen30 Aug 2026

Sources

RHSA-2026:60853 · OSV

Track software like this

Free during beta