Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products11

• Red Hat Hardened Images
• expat-0:2.8.5-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
• expat-0:2.8.5-1.1.hum1@s390x as a component of Red Hat Hardened Images
• expat-0:2.8.5-1.1.hum1@src as a component of Red Hat Hardened Images
• expat-0:2.8.5-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
• expat-devel-0:2.8.5-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
• expat-devel-0:2.8.5-1.1.hum1@s390x as a component of Red Hat Hardened Images
• expat-devel-0:2.8.5-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
• expat-static-0:2.8.5-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
• expat-static-0:2.8.5-1.1.hum1@s390x as a component of Red Hat Hardened Images
• expat-static-0:2.8.5-1.1.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this vulnerability, restrict the maximum size of incoming XML payloads. It is especially critical to limit the decompressed size if the application accepts compressed XML files. Also, consider running the application inside a container or a restricted environment to ensure that the high consumption of CPU resources does not affect the host system.

🔗 References (5)

• selfhttps://access.redhat.com/errata/RHSA-2026:77236
• externalhttps://images.redhat.com/
• externalhttps://access.redhat.com/security/cve/CVE-2026-45186
• externalhttps://access.redhat.com/security/updates/classification/
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77236.json