Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Hardened Images RPMs Security Update

published 6 months ago

Summary

Red Hat Hardened Images RPMs have been updated to fix security issues and improve functionality. This update affects the RPM packages used in Red Hat Hardened Images, which are pre-configured, secure containers for running applications. If you use Red Hat Hardened Images, you should update your RPM packages to ensure you have the latest security patches and features.

What to do

Update redhat ruby4.0 to version 0:4.0.0-33.3.hum1.
Update redhat ruby4.0-default-gems to version 0:4.0.0-33.3.hum1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:hummingbird:1	redhat	ruby4.0	< 0:4.0.0-33.3.hum1 Fix: upgrade to 0:4.0.0-33.3.hum1
Red Hat:hummingbird:1	redhat	ruby4.0-default-gems	< 0:4.0.0-33.3.hum1 Fix: upgrade to 0:4.0.0-33.3.hum1

Original advisory text

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:8838 Vendor Advisory
https://images.redhat.com/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-27820 Third Party Advisory
https://access.redhat.com/security/updates/classification/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-3905 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-3657 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-3656 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-3655 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-27282 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2021-31810 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2019-16254 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2018-8780 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2017-14064 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2017-10784 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2015-9096 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2014-8090 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2014-8080 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2014-6438 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2014-4975 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2013-1821 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2012-5371 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2011-4815 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-1891 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-28756 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-28739 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2021-41819 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2021-28965 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2020-25613 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2011-0188 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-2662 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-2725 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-2726 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-2663 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2008-2664 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2011-3009 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2011-2686 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2011-2705 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2009-5147 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2015-7551 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8838.j... Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=443829 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-1891 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-1891 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=450821 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-2662 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-2662 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=450825 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-2663 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-2663 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=450834 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-2664 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-2664 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=451821 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-2725 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-2725 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=451828 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-2726 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-2726 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=458948 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-3655 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-3655 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=458953 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-3656 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-3656 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=458966 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-3657 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-3657 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=461495 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-3905 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-3905 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1248935 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2009-5147 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2009-5147 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=682332 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2011-0188 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-0188 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=722415 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2011-2686 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-2686 Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2011-2705 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-2705 Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2011-3009 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-3009 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=750564 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2011-4815 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2011-4815 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=875236 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2012-5371 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-5371 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=914716 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2013-1821 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-1821 Vendor Advisory
http://www.ruby-lang.org/en/news/2013/02/22/rexml-dos-2013-02-22/ Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1118158 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2014-4975 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-4975 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1490845 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2014-6438 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-6438 Vendor Advisory
https://www.ruby-lang.org/en/news/2014/08/19/ruby-1-9-2-p330-released/ Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1157709 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2014-8080 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-8080 Vendor Advisory
https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/ Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1159927 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2014-8090 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-8090 Vendor Advisory
https://www.ruby-lang.org/en/news/2014/11/13/rexml-dos-cve-2014-8090/ Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2015-7551 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-7551 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1461846 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2015-9096 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-9096 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1492012 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2017-10784 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-10784 Vendor Advisory
https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1487552 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2017-14064 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14064 Vendor Advisory
https://www.ruby-lang.org/en/news/2017/09/14/json-heap-exposure-cve-2017-14064/ Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1561949 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2018-8780 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-8780 Vendor Advisory
https://www.ruby-lang.org/en/news/2018/03/28/poisoned-nul-byte-dir-cve-2018-8780... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1789556 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2019-16254 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-16254 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1883623 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-25613 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25613 Vendor Advisory
https://www.ruby-lang.org/en/news/2020/09/29/http-request-smuggling-cve-2020-256... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1947526 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2021-28965 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-28965 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1980126 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2021-31810 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-31810 Vendor Advisory
https://www.ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp/ Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2026757 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2021-41819 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-41819 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2075687 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-28739 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-28739 Vendor Advisory
http://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cv... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2184061 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2023-28756 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-28756 Vendor Advisory
https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/ Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2276810 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-27282 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-27282 Vendor Advisory
https://www.ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regex... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2459002 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-27820 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-27820 Vendor Advisory
https://github.com/ruby/zlib/security/advisories/GHSA-g857-hhfv-j68w Third Party Advisory
https://hackerone.com/reports/3467067 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published21 Apr 2026

Updated9 May 2026

First seen9 May 2026

Sources

RHSA-2026:8838 · OSV

Track software like this

Free during beta