RHSA-2026:73521HighCVSS 7.5

Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update

Published
September 29, 2026
Last Modified
October 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-68497 →

📋 Description

CVE-2026-68497 — com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing

🎯 Affected products5

  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:230efa56bab822fa630a65d74cd4b5af0e593b42c21c487800802ec3d459cba8_ppc64le as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:30e55f9fb650606a8545d965ece1a40950edfe5f3b7a23a3d8ac0248ce4ee551_amd64 as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:8ac34779962d720f440236f54b6a5446d04a941ac88b1ea518e71082d20a748b_s390x as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9@sha256:e6e5049aa00d9a46f29907d125d1c8bad860e12ca2788d8bac9621a995a47ef1_arm64 as a component of Red Hat Lightspeed (formerly Insights) for Runtimes 1.0

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Upgrade jackson-databind to 2.18.10, 2.21.6, 2.22.2, or later fixed releases as applicable. Until updated, restrict untrusted JSON input size and complexity.

🔗 References (4)