Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Hardened Images RPMs Security Update

published 3 months ago

Summary

Red Hat Hardened Images have released a security update to fix a bug and enhance the RPM package manager. This update is important for users who rely on these images for secure and reliable operations. Users should update their systems as soon as possible to ensure they have the latest security patches and enhancements.

What to do

Update redhat ruby4.0 to version 0:4.0.5-35.hum1.
Update redhat ruby4.0-default-gems to version 0:4.0.5-35.hum1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:hummingbird:1	redhat	ruby4.0	< 0:4.0.5-35.hum1 Fix: upgrade to 0:4.0.5-35.hum1
Red Hat:hummingbird:1	redhat	ruby4.0-default-gems	< 0:4.0.5-35.hum1 Fix: upgrade to 0:4.0.5-35.hum1

Original advisory text

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:36978 Vendor Advisory
https://images.redhat.com/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-42257 Third Party Advisory
https://access.redhat.com/security/updates/classification/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-42258 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36978.... Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2468494 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-42257 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42257 Vendor Advisory
https://github.com/ruby/net-imap/releases/tag/v0.4.24 Third Party Advisory
https://github.com/ruby/net-imap/releases/tag/v0.5.14 Third Party Advisory
https://github.com/ruby/net-imap/releases/tag/v0.6.4 Third Party Advisory
https://github.com/ruby/net-imap/security/advisories/GHSA-hm49-wcqc-g2xg Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2468498 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-42258 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42258 Vendor Advisory
https://github.com/ruby/net-imap/security/advisories/GHSA-75xq-5h9v-w6px Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

7.1 High

Timeline

Published13 Jul 2026

Updated5 Aug 2026

First seen13 Jul 2026

Sources

RHSA-2026:36978 · OSV

Track software like this

Free during beta