RHSA-2026:84706HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
October 19, 2026
Last Modified
October 21, 2026

🔗 CVE IDs covered (8)

CVE-2026-109869 →CVE-2026-109924 →CVE-2026-109932 →CVE-2026-87018 →CVE-2026-87029 →CVE-2026-109383 →CVE-2026-109829 →CVE-2026-109841 →

📋 Description

CVE-2026-87018 — undici: undici: Denial of Service via TLS renegotiation with mismatched certificate CVE-2026-87029 — undici: undici: Denial of Service via unhandled exception in decompress interceptor CVE-2026-109383 — undici: undici: Certificate validation bypass via dropped TLS options in Agent CVE-2026-109829 — undici: undici: Cache poisoning and information disclosure via improper cross-origin redirect caching CVE-2026-109841 — undici: undici: Subresource Integrity bypass via non-lowercase algorithm tokens CVE-2026-109869 — undici: undici: Denial of Service via unhandled stream error on excessive content encodings CVE-2026-109924 — undici: undici: Denial of Service via memory exhaustion in EventSource client CVE-2026-109932 — undici: undici: Denial of Service via unbounded WebSocket PONG buffering

🎯 Affected products29

  • Red Hat Hardened Images
  • nodejs24-0:24.21.0-1.5.hum1@aarch64 as a component of Red Hat Hardened Images
  • nodejs24-0:24.21.0-1.5.hum1@s390x as a component of Red Hat Hardened Images
  • nodejs24-0:24.21.0-1.5.hum1@src as a component of Red Hat Hardened Images
  • nodejs24-0:24.21.0-1.5.hum1@x86_64 as a component of Red Hat Hardened Images
  • nodejs24-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • nodejs24-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images
  • nodejs24-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • nodejs24-devel-0:24.21.0-1.5.hum1@aarch64 as a component of Red Hat Hardened Images
  • nodejs24-devel-0:24.21.0-1.5.hum1@s390x as a component of Red Hat Hardened Images
  • nodejs24-devel-0:24.21.0-1.5.hum1@x86_64 as a component of Red Hat Hardened Images
  • nodejs24-docs-0:24.21.0-1.5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • nodejs24-docs-0:24.21.0-1.5.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images
  • nodejs24-docs-0:24.21.0-1.5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • nodejs24-full-i18n-0:24.21.0-1.5.hum1@aarch64 as a component of Red Hat Hardened Images
  • nodejs24-full-i18n-0:24.21.0-1.5.hum1@s390x as a component of Red Hat Hardened Images
  • nodejs24-full-i18n-0:24.21.0-1.5.hum1@x86_64 as a component of Red Hat Hardened Images
  • nodejs24-libs-0:24.21.0-1.5.hum1@aarch64 as a component of Red Hat Hardened Images
  • nodejs24-libs-0:24.21.0-1.5.hum1@s390x as a component of Red Hat Hardened Images
  • nodejs24-libs-0:24.21.0-1.5.hum1@x86_64 as a component of Red Hat Hardened Images
  • nodejs24-npm-0:11.19.0-1.24.21.0.1.5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • nodejs24-npm-0:11.19.0-1.24.21.0.1.5.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images
  • nodejs24-npm-0:11.19.0-1.24.21.0.1.5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • nodejs24-npm-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • nodejs24-npm-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images
  • nodejs24-npm-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • v8-13.6-devel-0:13.6.233.17-1.24.21.0.1.5.hum1@aarch64 as a component of Red Hat Hardened Images
  • v8-13.6-devel-0:13.6.233.17-1.24.21.0.1.5.hum1@s390x as a component of Red Hat Hardened Images
  • v8-13.6-devel-0:13.6.233.17-1.24.21.0.1.5.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/

🔗 References (12)